Edit tour

Windows Analysis Report
https://forms.gle/PP1myaVZHGwAABJ89

Overview

General Information

Sample URL:	https://forms.gle/PP1myaVZHGwAABJ89
Analysis ID:	1559722
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5960 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5940 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/PP1myaVZHGwAABJ89" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-2071716587&timestamp=1732133957437
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-2071716587&timestamp=1732133957437
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-2071716587&timestamp=1732133957437
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eDsw&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704709073%3A1732133944862688&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49900 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: forms.gle to https://docs.google.com/forms/d/e/1faipqlsdlv39xbtjtpv47aaieyuzaeixyuiizhkl9flkibubhnusk1g/viewform?usp=send_form

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.59.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.59.34
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.59.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.59.34
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /PP1myaVZHGwAABJ89 HTTP/1.1Host: forms.gleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form HTTP/1.1Host: docs.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XeloF7a++syWelg&MD=VY+gfvar HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/font/getmetadata HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=WGZUyuaOS8K5nMqmTTGcspTW4-OAx8e7pSEFMQ-7ZSgxKbB4Af5mVEDhH5AkDq1dktnYzwUB3y8s63mU9rPmP6n9IyZHBgnk4-h9cccqkEXEgZqB0-DpLrV_NUI0UhtAFGqbZhSEqjK2dxWhGM_eRjzgpXHQ6UeuAcvY_GIswFytRtNUwSTrUYxTEh6lOLc
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-2071716587&timestamp=1732133957437 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XeloF7a++syWelg&MD=VY+gfvar HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: Cf=y(["https://sandbox.google.com/tools/feedback/"]),Df=y(["https://www.google.cn/tools/feedback/"]),Ef=y(["https://help.youtube.com/tools/feedback/"]),Ff=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),Gf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Hf=y(["https://localhost.corp.google.com/inapp/"]),If=y(["https://localhost.proxy.googlers.com/inapp/"]),Jf=U(lf),Kf=[U(mf),U(nf)],Lf=[U(of),U(pf),U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf)],Mf=[U(yf),U(zf)],Nf= equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr	String found in binary or memory: _.zq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.zq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.zq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.zq(_.Iq(c))+"&hl="+_.zq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.zq(m)+"/chromebook/termsofservice.html?languageCode="+_.zq(d)+"&regionCode="+_.zq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: forms.gle
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: unknown

HTTP traffic detected: POST /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/naLogImpressions HTTP/1.1Host: docs.google.comConnection: keep-aliveContent-Length: 5519sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-mobile: ?0X-Client-Deadline-Ms: 20000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_formAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk

Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_196.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_196.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_176.2.dr, chromecache_164.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_193.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_196.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_193.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_127.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_164.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_164.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_193.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_199.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_176.2.dr, chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie.svg
Source: chromecache_176.2.dr, chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie_dark_mode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/forms/draft_responses_onboarding.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_176.2.dr, chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_164.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_193.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_193.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_196.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_109.2.dr, chromecache_176.2.dr, chromecache_164.2.dr, chromecache_199.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_188.2.dr, chromecache_161.2.dr, chromecache_196.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_196.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_193.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_187.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_193.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_193.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_193.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://youtube.com/embed/
Source: chromecache_188.2.dr, chromecache_142.2.dr	String found in binary or memory: https://youtube.com/embed/?rel=0
Source: chromecache_161.2.dr, chromecache_196.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49900 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@23/234@26/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/PP1myaVZHGwAABJ89"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5960 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5940 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5960 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5940 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://forms.gle/PP1myaVZHGwAABJ89	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
docs.google.com	142.250.181.14	true	false	high
csp.withgoogle.com	172.217.17.49	true	false	high
play.google.com	172.217.19.238	true	false	high
www3.l.google.com	172.217.19.238	true	false	high
forms.gle	199.36.158.100	true	false	high
www.google.com	172.217.21.36	true	false	high
googlehosted.l.googleusercontent.com	172.217.19.225	true	false	high
accounts.youtube.com	unknown	unknown	false	high
lh4.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/naLogImpressions	false	high
https://forms.gle/PP1myaVZHGwAABJ89	false	high
https://csp.withgoogle.com/csp/report-to/gse_qebhlk	false	high
https://lh4.googleusercontent.com/nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600	false	high
https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/font/getmetadata	false	high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high
https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form	false	high
https://www.google.com/favicon.ico	false	high
https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://play.google/intl/	chromecache_161.2.dr, chromecache_196.2.dr	false	high
http://localhost.corp.google.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://families.google.com/intl/	chromecache_196.2.dr	false	high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://youtube.com/embed/?rel=0	chromecache_188.2.dr, chromecache_142.2.dr	false	high
https://apis.google.com/js/client.js	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/technologies/location-data	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://support.google.com	chromecache_188.2.dr, chromecache_142.2.dr	false	high
https://play.google.com	chromecache_188.2.dr, chromecache_142.2.dr	false	high
https://youtube.com/embed/	chromecache_188.2.dr, chromecache_142.2.dr	false	high
http://localhost.proxy.googlers.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_193.2.dr	false	high
https://support.google.com/inapp/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://play.google.com/work/enroll?identifier=	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://policies.google.com/terms/service-specific	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://g.co/recover	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_196.2.dr	false	high
https://help.youtube.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/technologies/cookies	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://policies.google.com/terms	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_193.2.dr	false	high
https://support.google.com/	chromecache_193.2.dr	false	high
https://www.google.com	chromecache_188.2.dr, chromecache_161.2.dr, chromecache_196.2.dr, chromecache_142.2.dr	false	high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://scone-pa.clients6.google.com	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://support.google.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/terms/location	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://support.google.com/accounts?p=new-si-ui	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://feedback2-test.corp.google.com/inapp/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://www.google.com/tools/feedback	chromecache_193.2.dr	false	high
https://youtube.com/t/terms?gl=	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://sandbox.google.com/inapp/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://www.google.com/intl/	chromecache_196.2.dr	false	high
https://apis.google.com/js/api.js	chromecache_176.2.dr, chromecache_164.2.dr	false	high
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://localhost.proxy.googlers.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/privacy/google-partners	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://www.google.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://www.google.cn/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/privacy/additional	chromecache_196.2.dr	false	high
https://asx-frontend-autopush.corp.google.de/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://www.google.cn/tools/feedback/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://www.google.com/tools/feedback/help_panel_binary.js	chromecache_193.2.dr	false	high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_109.2.dr, chromecache_176.2.dr, chromecache_164.2.dr, chromecache_199.2.dr	false	high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://sandbox.google.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://test-scone-pa-googleapis.sandbox.google.com	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://play.google.com/log?format=json&hasfast=true	chromecache_199.2.dr	false	high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://sandbox.google.com/tools/feedback/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://sandbox.google.com/tools/feedback/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://localhost.corp.google.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://support.google.com/accounts?hl=	chromecache_161.2.dr, chromecache_196.2.dr	false	high
https://asx-frontend-autopush.corp.youtube.com/inapp/	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://policies.google.com/privacy	chromecache_196.2.dr	false	high
https://feedback-pa.clients6.google.com	chromecache_193.2.dr	false	high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_193.2.dr	false	high
https://www.google.com/tools/feedback/%	chromecache_187.2.dr, chromecache_193.2.dr	false	high
https://fonts.google.com/license/googlerestricted	chromecache_127.2.dr, chromecache_219.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.17.49	csp.withgoogle.com	United States	15169	GOOGLEUS	false
172.217.19.206	unknown	United States	15169	GOOGLEUS	false
172.217.19.238	play.google.com	United States	15169	GOOGLEUS	false
172.217.19.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
199.36.158.100	forms.gle	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.14	docs.google.com	United States	15169	GOOGLEUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559722
Start date and time:	2024-11-20 21:17:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://forms.gle/PP1myaVZHGwAABJ89
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/234@26/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.17.46, 74.125.205.84, 34.104.35.123, 172.217.19.170, 216.58.208.227, 172.217.19.195, 172.217.17.74, 142.250.181.138, 216.58.208.234, 172.217.19.202, 172.217.17.42, 142.250.181.42, 142.250.181.106, 172.217.19.234, 199.232.210.172, 192.229.221.95, 64.233.165.84, 172.217.17.35
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://forms.gle/PP1myaVZHGwAABJ89

Input	Output
URL: https://forms.gle Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://forms.gle
URL: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://docs.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://docs.google.com
URL: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form Model: Joe Sandbox AI	{ "brands": [ "Holiday Inn Express" ] }
	{ "brands": [ "Holiday Inn Express" ] }
URL: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform Model: Joe Sandbox AI	{ "brands": [ "Holiday Inn Express" ] }
	{ "brands": [ "Holiday Inn Express" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewform&ifkv=AcMMx-fwUONLIqLyZ5lilVpK2CXVSfP5rv1gNtd_T7UOkGtAexAgD4NMVtJW9jiaL-NZ_JR-J0eD Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	dropped
Size (bytes):	546221
Entropy (8bit):	5.5507400530194175
Encrypted:	false
SSDEEP:	6144:eY8HcavgUEXAiPi+VFhyb8sdekeoQbzUUNfE+Dr8KC:eBy0lUNfE+X8j
MD5:	45E7973E5C507264D2D97EE7EFE8AA5E
SHA1:	03F7DCEA565912312766D33232516FE33DD3FBCD
SHA-256:	F82D636D3E2E32D223DAEFC3CCC76BC6064DA4098E5CCDC9EC66F8C41AAED7F9
SHA-512:	126D941360E1A937A683D002FC16F478D2BA151F0B1BCFB56A0CE735976FB103D98E465FC15FF71021F2693C6E70FC936713AEA289AA0D3DE711548E2E0218BE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ia,la,baa,caa,daa,eaa,sa,faa,jaa,maa,oaa,taa,uaa,$a,bb,db,vaa,xaa,yaa,mb,nb,Baa,ob,pb,Caa,Daa,ub,Haa,Iaa,xb,Kaa,Maa,Naa,Oaa,Jaa,Bb,Uaa,Vaa,Waa,Xaa,Yaa,Zaa,Jb,$aa,Raa,aba,Ib,Saa,Taa,bba,cba,dba,fba,hba,iba,kba,mba,nba,pba,qba,rba,Wb,sba,wba,xba,zba,Aba,Bba,Cba,Dba,Eba,yba,Fba,Iba,Kba,Jba,Nba,ac,Pba,Oba,Rba,Sba,Vba,Wba,Xba,hc,bca,eca,fca,gc,ic,gca,hca,ica,mca,pca,jca,oca,nca,lca,kca,qca,rca,tca,u

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72896, version 1.0
Category:	downloaded
Size (bytes):	72896
Entropy (8bit):	7.99302309612498
Encrypted:	true
SSDEEP:	1536:l+/lJ4+lxFkpiySl5jIWJ2wLyusIoQh8TKiZeWwn483A16TMVo0MVuJ:SJ4+DFAPSDjb2wLuIOkRn483APDSy
MD5:	8AFBBEF49E32F6382F8C029DDA485679
SHA1:	2FBD600C537D820F23D492D907DAC0BD98F0778E
SHA-256:	D4C4F413055D77B989E4D3BCE7E3CBB45427F251387EABFF8F9709F4EE1B2BF0
SHA-512:	A18299FDA6BDDE29D6036FADE0A234205D8BAA352BC15BB4AA846730D367EEA737DBB625D65FC49414906B2431290C14AB79A1C36241A206FABF80CECE385D29
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuqON8AA.woff2
Preview:	wOF2..............e(...\.................................4.`?STAT....P..............6.$.... ..x..g..[...e..c....Vl#Q.....hsH.-3......7:.............].....u.....................%?"7......^.C.....A..jbl)...M..S>D.8.b...gl%g.Z.&\MHZW..{.p.....Yi5..&....[.LI..ye.j...W.0.p...xR..!E....k.8...Y...+....[...!ye...o#.>....'.T..s.a4.[Lk.k!......d..p.i....k....lF..5~Z..zJ..X.T..lB.1...(X..Uf.k...\|K1:..6....a...3W......;SvG.J.@!./..^....v.'N.sB...7..o...a6q.x@k..Z.E-!W..n.K.m'......eu1 7..lG".3......+.A.\.]r..wp.\.\.... 3..V!.x.BP.-+M..BR.N....^F..h.{..uas....0.....Xr...x...=.C....c.A..<.#...#d.w...<.d........ .G5\m..0RNqivB.xwD...>2s.E.].u....3.....P..`...-..pJ...$Fg...+.1.L;[..s...6.(.Y.+!f..}d..DDh.].3yMPN#3.}.p....P.8].g..-5OI...'..Il]i.D..oR.g+.+t..G..32..3O...../..I ..bk........(.\.O.....1..c.....Io....e....W...*.I.AG...r:.E.4.......M>.[....!.._.?:$......'.oS...Fw.-...L..J,.z.(......}k.l9._&./d5.l...Vm.z...=...~..D.I......r9..k.6..b...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65828, version 1.0
Category:	downloaded
Size (bytes):	65828
Entropy (8bit):	7.994888729247966
Encrypted:	true
SSDEEP:	1536:jpUCPU80z/viwxp2ws/6HBRhRhKT7/wu7QlakYDFc2kN4B265:jpUcZQfx8w9hRhzKTJQXYDnHr5
MD5:	9187B9AF4CD2B2C0080F3E41671E52CF
SHA1:	50810C3D6D3F3AC2155409DEC18086ABC3E17E9C
SHA-256:	DDD58F9FE28DBDF8AA84F7F39DDDDEBB4CBFE5B0C74470ED72C7624C7742CC30
SHA-512:	B2AAAFEE669B48C2E66F3BC010CA7FBEE9B2E9B17B11B9BA619412777DBCC35B37F8F098F0F6001428877FB72B0072F451F51577E98D15FC9B00292DAAEA3541
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuT-R8AA.woff2
Preview:	wOF2.......$......b...................................b..4.`?STAT....P.....d..o.....6.$.... ..N..g..[ ...7..<Hm.f.. ..}=p..!v....m..... ....t.1.R@..\S..kq...xN.%................6.y.g......H8...Z....BH......J.2.R.V.v'l..q+.TI).e.lFmA(..$...-..t.sZ02P.LJP.~)+.z.F....L.M@...fC..\|'..i..!(6.....d.2n.Q..YR.9.....#wQ..2.][.,i......\.<I..s.o.Q[....Z.....\|......../....=...R.[.1..X...L.Gj.Q..........'IBS....;.%u..T;.gh.y..d..2...7....yV.8..}Sty).\^........IX......p. .=.ze...F.8x..bC..h.Yg4...%......h.\|..{`p.....~vx..!..p.v.....t.tB->j.Br.?.Y.. O.s...X....s0.g...].=.Ru.".rR....z......\Z.N.y_...P...h.CMj!.z~y...?..i}...S..ft}u..N...x......0.l....Fz8U._..;42..bs.....+.zG]..[.Ot....wE..\..,v....GK..$}...sT..Eh...?U;."..f....x.:.i..NC1..._...P.\|X.2.%.,....{3.51..*J9.W..}.z..RL.(t.P..2........M._.....+..u.X....(e.v&aI.v......J}....$..O..U..:4I}.h.S`0.....ZY...q.g\|)X...!....VM.K.#..K.!...B+!..D...6@^.Q...E..6z....X.`..D;""....D...$..q...{.y......ui^-...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58012, version 1.0
Category:	downloaded
Size (bytes):	58012
Entropy (8bit):	7.997002014875398
Encrypted:	true
SSDEEP:	1536:v/rygnjckWB1Xbc33Q1k8BHGEUrn/ydR5V1H27zpYkf0N+:3uUjckQOnQ28xGpKddo/SksN+
MD5:	E88455150169496390368F9DCFC709C6
SHA1:	672607F20C14829A1071441C031A8411196CFEA8
SHA-256:	133BB5C5AF6B43D96660FF65F46464F2A03F7D0DEEB8E2A1F8E0AA7CE6770120
SHA-512:	D9FCD7B9C17DFC2DC256E9537FBD0F653C706FD063859602FFD0229768FA1AF6A5B1D723F7A91AD1EEDD0021C21AEE0FBF894933E352ECF3F4D7B0EF655A273F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wsf6.woff2
Preview:	wOF2............. P...6..........................b..X..T.`..(.....m.....l..N.....6.$..p. .....p..1[.....;..z.o?@\V.7.O....).i...m...`<M].4.....I2.....m{...P.4.....Na"........6..Y.4..;C. ....<.!8..}R...i.2..UR%UR%S..uc..b.1....U2.=....F...w.....y..%.....t?@..8\..Y.....F+`..H7...%N.().J2...(..5..w[z..0..C..W.....:..V.v...k..M...%......}.>..._.{....^T.h..\|..#.Z.......?d.m....J..+N.<=..........@......_&k.O.....P.FE...aDN.02.n.3j..#.U.....W.:......>..$......d..s..~.~w{.I%j.%1r....0..Q.k.../.{.......~...w,~........1.S..$.$..T..T@..Q.~...O....!.YB!..h..L..........9......)>.X....PMm....p...i.;....tP..&.O..v....61?..y...sfI:.$`.A.(....._.....]....{.;o-.H$....d.......:M$....m6.a.K%......}h..XND..t...s.O..."F.$.-.....Vf...d.:...R..t..(.<..{.{..J..O.X.7<.taU\|.~.=..1.8..+&.w......4L$...B.f6'.k^..6....N\.F.4.2...$..U~......1. .m..EBr...D...>y...1... .t.'..jX..\j).2...n...i.....\M....X.j..0.u..`..@......g......._$.*l...B..[W...#.....R.....?...J..H.?......g.Y

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1360, version 1.0
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	7.749168790064011
Encrypted:	false
SSDEEP:	24:yUaKOlSf0ba+BV1iyDz2R+Z5d94VAHTTdjeIx1P0iN0nYr+MN:3aKOlSfwVZ2R+/r4K14cN
MD5:	248816E2428823AA2BA6B223B82EC73B
SHA1:	EC8DD868A619356C0E30606ECA110A239CA0D83D
SHA-256:	4524691B7547D0D9F1A34FF172D940BEDAFD7725A14A5BD1121807B7D993BFFA
SHA-512:	DC940B38C218C34AC32B45144B07CADEE60E1AAE7C90F0E657CABD24C09DEC0E43E9B450F9DE107E5A78C2321F115752F8A741362E37FE7099DBA2830BB2E002
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUBiZQ.woff2
Preview:	wOF2.......P.....................................0..j.(.`?STAT..t......z....6.$... ..D.S.....(.....(.F5Fe.....bS.!.}.^.\|...w...........d....(.Tj~^.z..........]4..NR%....>....9Ym...QF..q`\&E...#.9......v....5..X.."...d...H..h...6.GR...h@....F......$"...d...+.....H....@.@`.a.B..u.x.J....j...........uD.`$hL.JXp.......0. .lt. ._.;../L.;.6..4.X....1h,j:1fr...f...r.,P.8...Vd......+nY...4.17....j.`..P.. .. .. .....M.(.....h9.......... T...P......7$..$...k...F.....Hs....\|..@..%H*@, ....^)...q..`.8m./.........98f...M.c:.7S...c...`.w...B....>.&.c.V..{.!...c...x...82`.t.Z......3....y., .".s...Wj{...[.n....<d...cc(ob.I.YB........E.{t{........8X.....1....m=.c.z.`!.+.f....e..>5..Ha.9..<.I.........-.`.{..#c..ur.......r..[.z...TM.}......&'..'...o.{.....=.JY..l.u.lO..BcG[K..}.......c.....w..S.G..pG....j.Vr....$...".M..0..U\|.hVX.+S.{..oV.g...m.m......Q.kKF_.......he[O.l..g...".......$....=_..@...}.S.....-..!...o.....j...OK...`?..'..p.._.H....B.B.<7..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 380, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17180
Entropy (8bit):	7.862064150328919
Encrypted:	false
SSDEEP:	384:SA8KVF93kBtoN7Lwsxswpoklfj8u/+U0H+OB7FRsaZh:nVkBtMGyDlr8DkO/R77
MD5:	3DC67086A02E69C9A18141627B1CA27A
SHA1:	17B91322A37755FC377D7D10BA0503B51426B4B2
SHA-256:	E1E80B06F1B936EB8096C2CC37F5AEDA813855A9A806D195A10DB6DDB1752F53
SHA-512:	F7DBDE50F787D5E091244C204CFAC480007DEB2F65904F117C5889FB8E0EA3A0ED271963584EA20AAEE9F6CA7E043ACD59E56F75A5F5EDE1F90D4CACF76B7398
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/forms/draft_responses_onboarding.png
Preview:	.PNG........IHDR...p...\|.....O9.E..B.IDATx...."Q.E..k.x...`?,.5..y7.)...s.......).{..................C.. .=33......?.p.)........t..\|...........VRkw:.....t.=UY...L./.Dik&w......;......9.E`.}..5e.d'...d.W=....o.......O..RuehS....}.0.X..x<..x...:zU.....i^.p>.......r`..~..h..,pE.J.].[QG....k...m...<.&.>..R+U...L}8@... "..P..F.......d...U.-...._x........g..,g]..`.z..=..$.!..........S.\|}..>..P.a...onnvS..wuu...RC?_R..C^.tm.)..t>..=..z......uh.....Rrh.s`SH.aMz`K.,.~.r..."........E-...}....p..\.JM..m...8&r.......yrdV.'m9...)..((iz.0...........s]X.................-....tk&t9.V)...~.H.CD..dK7 ...3L7.l..w......\|......3=.....}.aX&.23..L.ef....ef.6.Q.A/C.f .T'..<.L.3..r........{........nqB..=...~...<.c....199......,,,.>{..g.;......;.......&...x(..............1::...{..F.O......e.........fl.......I{.......U...sm.i.vhOH.G.5........k.H.I;}.t..G/^.8]4..........z..].:7t..i.....)T..mW..0s.J{u]BT..B..-.\|....}.......%...y.3kQU........._.<...~sdd......]..]w.f.s

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31456, version 1.0
Category:	downloaded
Size (bytes):	31456
Entropy (8bit):	7.993355498241683
Encrypted:	true
SSDEEP:	768:5bx84QeXTL1ovgoUiK31+lssZfEHQ6EXEjJkEbyt5r:84QITL1onl8OsOfSJEXEjmx
MD5:	8787E52101C989DEA9FEA21E232FA45B
SHA1:	F112710595BAA904A62B68C2066DD34D7103E1E8
SHA-256:	D5C4965A6E9C89DEE7D1389167C821976BFBF55D80E7DCDDFBCB5400B1AE01C9
SHA-512:	CFCB461162FEED6F093440F8569689B5BA34A0BEDCB10A12A5AF2E470A7071EF0A587331AA920828F8E78792D8E5BF43663540887C247D7F1AB8A14CAA18E2E3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvgUQ.woff2
Preview:	wOF2......z.......R...z{..........................F......6.`?STAT...X.....(.....H..6.$.... ..D../..[.+...c........Yo..w..t.x/....A;4.....`#eM.....v..c.w....V..).RD..ZK7NU..r^..bji..uke.Fk.p......LB..8.....d.OB...........[.$$!.u..f.......6.&0......r.B.u.-..q.../X...7...`?8..$.....#=Iv.+......L.]la.>.s...5@..p..g.....tk.......V....z..BG..`.8..~..........p.......B....}lp....d.z-....}w..\...$........)..u.&.U..U..........}.{$..d......'.Jg...B.....EpQI...'.....?.C.<Q'.DI^8U? .)........-^....Vi.%. <..k.) G..w.Eq]\...W..J...a.b....,.Z......p..B.Fm...F<~vN.K.Aw.?...s.}6dC.t.`..l.~l..."..-m...nY....i....i...$...[...g......@....],?.s.w.._.HE...L.A.6.6f.....F...U.....h...?x......8.....:3...{.SYIBW.].a%..P<;.Tu.~L..4k.dkM....p..J.......v; ...a.ics.?...,~Bmn...te..?....O\|.2..#^.......8....\3.O......&...B......\f......U6.W.=.-.7...?....3...5....#...QU...W?.d.8V:n..\..tl...0.w.t[....<].FQdKR..\.).....%$qj.o....%..# Y)..cK....\...w.........(..}"@J

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	downloaded
Size (bytes):	21264
Entropy (8bit):	5.427139876048965
Encrypted:	false
SSDEEP:	384:LoRf9pXyEg9fgHW9hK/y+KvhMYoRsZUx1sqdpCid8gO/tuBY2ET:LoRf9419/K/y+KvhMRKE1TpJd8gO/tuY
MD5:	381A3F34E0579A00E97C40C9B8151A92
SHA1:	C2538EA94785DAA5F9A52835722726296B79F71C
SHA-256:	09EA0A5BAFCC5EA359BD2B7D9C348A8068C33686A1568764B7955C3A33594A30
SHA-512:	F26F0F9BDACF40A29C9C964A872E105D46FD055135C1B6E89927B9328C9DCF414216BD55D61733A7BBD8B5C8AAC6EDE18D5A16BD8D7E2EF55D9FA8816C7AFEDD
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=p3hmRc,LvGhrf,RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var GIa;._.IIa=function(){var a=GIa(_.He("xwAfE"),function(){return _.He("UUFaWc")}),b=GIa(_.He("xnI9P"),function(){return _.He("u4g7r")}),c,d,e,f;return(f=HIa)!=null?f:HIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.kf(_.He("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.jl(_.He("y2FhP")))!=null?c:void 0,eS:(d=_.jl(_.He("MUE6Ne")))!=null?d:void 0,Zs:(e=_.jl(_.He("cfb2h")))!=null?e:void 0,Jp:_.ll(_.He("yFnxrf"),-1),B1:_.lGa(_.He("fPDxwd")).map(function(g){return _.ll(g,0)}).filter(function(g){return g>0}),.z6:a,mxa:b})};GIa=function(a,b){a=_.kf(a,!1);return{enabled:a,hX:a?_.Ld(_.ml(b(),_.Yz)):JIa()}};_.Yz=function(a){this.Ga=_.u(a)};_.K(_.Yz,_.v);var JIa=function(a){return function(){return _.rd(a)}}(_.Yz);var HIa;._.k("p3hmRc");.var tJa=function(a){a.Fa=!0;return a},uJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42132, version 1.0
Category:	downloaded
Size (bytes):	42132
Entropy (8bit):	7.995169768536831
Encrypted:	true
SSDEEP:	768:mZTig+Kv+tyCkYAb9D1BDH1xIE12gWo4kXJ6xUCjOtEsllZ5ql3/a0YM3jUVgQwE:6ToKWwC9AnxH1+E12gbExUr0PdzLcQUn
MD5:	2661BDA6D2BA62A920BE11952BB94849
SHA1:	7C1EE90488041D444D2289AE42C06D1958F34584
SHA-256:	ADD6DDD7FEE32D58EBA385983AB7DCC9657AD97CDBD4BF4594DB38675847EDB4
SHA-512:	D89115D310603052FF8E9C10F23322F64C74A6E4588F719E37A9368969122752357BB1BD3F45136D34AABE6DCEE717B462684A2D861931635B63AA876AED0719
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshRTY.woff2
Preview:	wOF2..................0..........................$...r..4.`?STATH..........Q..6..6.$..^. ........[...E.2v_.0.%.......-g..`.)..Wz.0.p.;.L7w".C...}........H&2f...i.B.(.s8....\.M..\..)kW.......z].L\.-....."q..pvGW.F..+0e..fv....5....H1Yu..&..U.]...fiQ.....'..3.-..X......PT....,K.5.....^.W..LB...d0...d0.Jv.%.........7.$....,QQ....".d....N.x.Z.?g..Z.LI....Q.{..D..j..M..L..<..1..CK.......4.......8....s..y?..=..D...\.M...?.U...N.7..._..dR)..VS%K./...G.M.?..[.B.s.o....I<%..hp....JD.+.z.....g..."...UX....T.J.q.B...y~n..}c...#R...B..\|,.(.`R..." .G@l...a....)..{...H...........$.:...g...(R.w......\|.}6.<.M..J....5c36uN].K...E..r.c.{;n.7k.&b.._..O.i....A.Iv.N..: ]I{.t.B.....s.tz..wYgo..eJ.ej..?.....bd.%..."...C........bc...,b.BZ'........U..........B.....#.m.....c.6JJ..Q%0Z..Zh.D.60..0....N....;,..<.....g)......9.M.RE.......ET.:..\..E....o2..4.....8...&....w..w~(...a.#.T....l........(W..f...6r..P..."......@....@....3..Sq8.J..(....u:...%3.?T<....M\

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4196, version 1.0
Category:	downloaded
Size (bytes):	4196
Entropy (8bit):	7.947790388565488
Encrypted:	false
SSDEEP:	96:XXIQbG13ziwYaI2QRncIaKuia6GpnQtzFLt4Lh2uSKafK:XXl0DVtIPuiYCKaC
MD5:	92CFF5BF3D47970DEFEF49EBF56448DB
SHA1:	163E2B870500AC648A075A008408C9FA73922953
SHA-256:	AFD7B4CE1230FC5D6CB58DAEBEED6BCD09EBEE1E4414367596BC3BB33F62444C
SHA-512:	49627E12E0B3DA7B6C5F616D3DFF3AFA24F2F7C247B46A34E6A99F0476863F071797CF265AAB2C5758CA265FFEC7E5846AE80715350795EEB40615124D2335B2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vOEDOSf.woff2
Preview:	wOF2.......d...........................................T.`.....$..m....X.e. ..6.$.<. ..x.W..<...3.5]O.../..!.m`_..5~.X...;c...S.#T,.5V......`u......t..#$........A...2.p..l.{b+H........p.....@....3@..%....k..[....(....l..]cv.-...m..(....=....1..=A....5E....\|..v?D...Xa...w@..J&.%k..)z.Q..8..4W..f.2H$W.h+t....$9..=..q.-; ..P.qJ..$.Ua+L..0.....'..u71..Bg.F..U. C".....!M...)V........M._s..mW.w..X.c.A....`n.....{.@..-J....B}...q.o.0..>.Q....\|.z....BBh......sIX.$av_5...J<./..;........\|h.......2.#..0F...4..b...}E..d..\......1..N]........`.0B.....?A.9...F....+I.BX.....(W....1.t.C....[.t...jo{..< H....F.+@..@.v......D.L.oD....Yr.("/M._..I...m....^...`....W.OZ.O..0.p!tQ..?.......a.1-e...Z....k.zb....j;!.&........m.-......;..,....`....3...?.!wT.{.R(.y...>.i.>..o......+.db..:b.....vj..)..\...2.&.nk.q.W..F..tM...._c)......@:.Z^..;...O..6".P.V..}x..4..b/....[.S......~4..c.^..m.....2..p..lB.K..O....>..K......C.m....M.H.Y..a1..:.0.Ki..7..(\.f*.3

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64068, version 1.0
Category:	downloaded
Size (bytes):	64068
Entropy (8bit):	7.995942836449749
Encrypted:	true
SSDEEP:	1536:upRrvXnQdfmI5RP21QVVEIeKN8UhJhfEvCHal5j091ScR9b0XnK:u/rIdDkiVl8gfol5gnStnK
MD5:	EFD94F0EB81E50A5F75CFAC73257EFC2
SHA1:	E8C4E0A66E8BA85DE2BDACA59CBCC55CED60BBCA
SHA-256:	3A6C1001C36D7F2F8AD4DF369BAF38217AF3ADAAE94A5625651C05F4C3A38BD3
SHA-512:	215837C93B5FF3247D5912CEC24216CFF64C16DC6B07F620424E9DB101DC6FDDC792B546F42744D74FF08785D6CA2143A6D45F5C1D4B84E357DAB942456BA42D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vO0CA.woff2
Preview:	wOF2.......D......(@..............................>..l....`..d..$..m.....h..&.....6.$..X. ..x.....<[..q..].)..].....'0}@..2%~.s..<mE...n..,U.......d2........XV...Q..Hexa.f.lE.&...c1....T..4...e..Uj....{..qL2.p........ZG..(.YKz.-......M.=.5q.3.f..C_ ..Q..Y.F.p6..E..T..$...H..I3..g'/M..OE../.n..M/=.f.......G.r.h.......i)k....I.c...Y.`.{.O[WCe.]Um.F&Z.u`"..........S.W....Y..}"..i..T.....gl.......H.m..b..Jru.KH....$.PI.J.....+..q.$.p.m..ZY.U.g.@4..:VAV.N.ed.....\...~..s..........h.h.....d..A.....~..Q..O...v.;....l....,..KJHI.J..E.b`4.).}g.y....mz......!:GBu.).....>.`.....>W...Ad.,@.!.D............T.S.!..jf....N......WnU....X.9..t.....F..JNz0....x=..2.u.....!.....=....}.M.DY....b_R..W.<..?.l.!.[.m.6.T.X..B;h..^.B).u./g...].....$.l7....G,.ff.J..L........%..?..6a..G.........$......X.U.e.>....v3.m&Y...nX> .V0p.I^.Jw\.b[...=3..P..<...Av.k.......Ia.....x......Ja......jSH.......P.6>Qi.*..m..b%N+F.......O..{.s.O...XqR.j......P...)/i/..&.R..i6.......iw.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 216x216, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1600x900, components 3
Category:	downloaded
Size (bytes):	687032
Entropy (8bit):	7.791582217595028
Encrypted:	false
SSDEEP:	12288:fox13T5whPyF106inGptpvBZjUhFfHlLyWGc6IvxSczSkArrH9J1Fcr:fY3+5y/PD4FfHtzG67SkYLcr
MD5:	7726914C6A5FFA57D9B1F6BAA813BC07
SHA1:	638BFAD3359DC6D8AA4897063F5B14E33FD76476
SHA-256:	90D3AD5BA4B1510A49795163D948652C871E31949A619EA914934D12B0F849B8
SHA-512:	FFB33CF3828F881CB4E3A7FEBC4EFBC32CA3EE180F0817DDAC4A823B2BD35388941849EE4E0680933A97F36C03649BA5FCE29F71256D7DFAE61B1EAF517638D0
Malicious:	false
Reputation:	low
URL:	https://lh4.googleusercontent.com/nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600
Preview:	......JFIF............."Exif..MM..........................C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....)^O...............o.@....g..~j....i.G.....z. ...}h......x..........Lx.}K...>..=H.T~_...5.b.co.H..Rytyt.+.#Q.......W...qx.._;D.}A..+....^...i^y.lx.....'...?j.../..]E/.._;.T..v...91....g..E..5.....:....{........%..<.6.7....$[?.J..b.........W........6......d..L.x..=IvG.....f...\|......d../.....X...vg.../.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1664, version 1.0
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	7.800722707795522
Encrypted:	false
SSDEEP:	48:b9Xwld63PE6EdXkGPFNZJxN2wwNL+vDpiD63DU6dvhuR:BHqXkG9v9wNL2iuTUgAR
MD5:	F19AC4E354F2BCE2E6341B804767E11A
SHA1:	A197ACF3FA097BFBAD358400BD07EAD8865F6FCC
SHA-256:	A631F36B97689FFB94AFDAEF8032E78479D469894A2B18F007DEA806DC1172B3
SHA-512:	F923634378A4236509C4F2C0514D4FA23B4DE4A28E24CB29EDAE81CA9204A9A8DACCC0621FA440FBE193AF51F4B72CF467229C04FC8240EFF2517D2B679D454D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMDrUfIA.woff2
Preview:	wOF2...................#.........................2..r.V.`?STAT..\|....T.c....6.$.6. ..h.[...h.QTo&...`.XwB#4. E]=\|..7.s..NH..5.+P..B.g)..P....3.Q.n.<..Q..........5M..i).N.H.../..{.....D....P.V.e.j..R].(.U7...`... ..p....FG.........Jy...O..j...,..x5.V.r....t`@9.....#..#.8.....o...ikC9.R.LP.. ...4.hx.+.(WJ.R.b...y...+..-.T.H(b.@...;...9.AM......!.....=.b.e...C......E.HAV...B..H. .^.h...j-+o".Z9."...P'\9@....s,....o...J....,.<.....Y....R.-.G.\...x..Ya.;...P..DK;..(..........@.@&..#.9..l....'..w....x... ....-.y...Xh..y.....1.O.&.n.O..T.9.....b....V...L..jy8U...;..mj_.P.`C~.(W.........\......O=....0.!.....x.V.nA....b......A^\|..i t..m#$.\h.6B'...b.9....&d....zE...\|.L...P..".....+3U.....v\.aS.%."..B?.(\|.PO.`...*...T9..e....Gq.qn..3.L....3.R....L..w........D.m{...........q"..q.fKx\|.)4\..6.....x$_MC..m]:o.?6...0.X..G.e.c4G....{.9.......9.Y.9.53.l.Q5....;.._,.KS....By......J}.....z...'/~d8zm..P.e..a.9.f....F...fp...fm.F=P...P..M.N..H.i..k"2..~....\|.V.s$.Xd...&>[,..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66276, version 1.0
Category:	downloaded
Size (bytes):	66276
Entropy (8bit):	7.996827864944505
Encrypted:	true
SSDEEP:	1536:hWHRkoKnMRHs/7qNSfS7FOOdx4euM2PK1o2SZQdXyh:hCkoKnuHweAfaOeu+1o2SUyh
MD5:	4A18EE02A61C1E97B6A2BB549ECECFB6
SHA1:	903E2D62B1C0F4961B986C32A001746B960A476E
SHA-256:	F63FF627E6BED31DE1AD159CD550DD84108A6FEA88B1FEB03E3A59421B556734
SHA-512:	3BD3091352183AB041B1AC369908232B96897D1624DC1614E3B51D6CE8F9648E7B4F8601D3AB592B5A47D11CC7A53C7F9F9EEF281302D9EF1E73B968E1025E52
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq0N6aXo.woff2
Preview:	wOF2..................x.................................X.`?STAT@..l...........<..@..x..6.$..l. ..h..o...[X...Ucl...!CjLk.S.d...R~......Bg...[.s0+B..l.r....+.o...........I.fr_vI..>..E.."2...&.<.....2.....u.R....1.C...Ah.}../..QCBE.!mV!N.U.T.D.LB._Kx..M...L...'...(..n.....e....].F.I4.A2.._....#.l~.wE.&....It2wd.4S..b.u..].G..!..Y.5.L.K...X.....<.de.....7..R.0....BF.\m.O..;kS.T..bYy.\....u...'.Re.p.L`....N......Hb.g...).g....T.....Ui..;....~.S...C..9&O.3.....-.b..r..&. .I.x...'..,/../H6........^?...I..2....../.Buu\|..ln..C....cB.....)j..2p..2..K..(o...Y..+.....V4..6@.oS......r..4.].1e..+.._..._..7..&.Yq.v...........^.'....."W.......m..>5.UC.R...........{.o4...D-.,Y".b!.. Fa.f.X..a.F.u'F..X....<.6.._\|&.\|d......t.".......f..Q.\..]T:....R...J.['>S.j...E.....mo.1(.-..I(....Nr.k.S...]d..o$.m...!....0.v...#;..2fY;k.}.*s..P..:...}w..Kf.$;.d..t.o.+..f....Ru..X%..=....m.....C...C....=.!.U%..bj.l.J$.$.x...[.>..w..}.?...M....Z.j.c.tj.z.o.Vj....x.9Q..7.?ph

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45536, version 1.0
Category:	downloaded
Size (bytes):	45536
Entropy (8bit):	7.993627122085847
Encrypted:	true
SSDEEP:	768:KsRpGWzvLKRnz9VDn7HdJiBcMaaZgHq0CaDtDM/WcdvfoBhZYkQG:5Rp7eRfn7HdJiBDagwDZM/PVkhakv
MD5:	3C33061F3F982F2234262844D0FEE4CA
SHA1:	C4BB9DD654244A9EEBE0D6F12ED4C4E853B18252
SHA-256:	6504F1B88B6DE335A0FC2D1802EF8B000F6569792F509D4635128DC0915D6D70
SHA-512:	9EF8F96559F614C2BBFE33D0F385C0A7723E6E95DF9EDA30ABFB6CCE879E5F39E22138773D57749FC762F12EC23E11ACC9DA0B6F4D99CD0A39D50C8F56B10D4B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiukDV.woff2
Preview:	wOF2...............4...{..........................X...L..,.`?STATD..t.....@..Z..j..6.$..P. ..`..U..[...c.({...'&..!&F................6.uf..S.l.V...i.x.........].D.,..K..@...:un..7_....D..K-M.mJM#....m.mV.A..'...~l.4T1.4........iF..#d.......G~.....>.r:.r...NC+..U..75..6...g.wp7...............J-<.h%....i.P_......P.R......)....BS.9.m./..M.>@....1.(..?..,...._.y.....J'...RP/c.&B..J..h....X.C...UBG\|T.u+..e.I......[6...~...&...1.1..}......J..`....\?..aoZQ/lhL.}t@EH.y..ZA....HjP.g.%d..<.....v._L...]...`.a.#<. <...KS......I....t..@[V-...^.xe.&...n@do.Y"....%T@p0..Xp..........>.}....7...D<.M.......ID...m%.A2....[a............j..;IJZ.....L.e.Kyd5"....OO8S.AR...~.c)....A.8..?8...RW....{..>..P(z.4.+............#/.....9..j........`..N{h/tb...^.....t:c.57u[...`E.f..\..~.......D..UQ..~..x.hJ.H....Z.F.B~..S...[...q..-f).....mP....l.E..#.R...[...0I...0...h.eyGzu........_...Uw...Cr....+.B..9.&....~~.g..Z..y...^.p .i....$...,...$..Mm9.m.i&....n'.n`]......y..c:B;.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1748, version 1.0
Category:	downloaded
Size (bytes):	1748
Entropy (8bit):	7.840525971879245
Encrypted:	false
SSDEEP:	48:TkXOQ7jX7K03LmuPpXa0xo0LdsiYeVsVo1Y/Urwn:uOOXW03LmWpXa0xo0SiYusVaQ
MD5:	6DBF91A51C653C0BA098FED5B34ACC55
SHA1:	599EBB3EE593F5C381AF2429993AF2FD01610C0F
SHA-256:	39DBC90B7B4C41925E680E6EA13E84E975E936AA8DE9B04A8C401A332FBDE393
SHA-512:	61FF9094CF2248DB64F8E5B665F096E76DA8DAAFD8939E0B4AF0B147BD43F848D201779B079F1F486EAB8C1F9BF3192443B6BBEC1D80B76D2227C446569203E5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5GxK.woff2
Preview:	wOF2...................x..............................4.`.f.T..<......G......6.$. . ..t. ..I......m;...$I9I=c>...Xo./M54k.I%2.@...%....].P...!......R.I.(>3.W:3.8....L.\|7...B..{S..........E$....N0F.S-...5...H.S.....(.......R..q.%..p./.....X'....z.......csz...i8...3b..@/..q..0x..@....}...N.._.5$..!ympz.6.........zL....x.!.}...q...B..Q.a.2....y.....Y{=.Q.g....m%2..k.7/G.g.o..L~ ..J.?/p..E^.l.J..+30..=4.=.......@..0..p.m..(..iH..a+\|...7!..<3.0."A.v.......&.l]....,G.)..R.CI..KY.\B........fU.....)..b+..S..L1k.]..n.iXq]}c.2.K..t\...B.c.]G......I..9.+fT.U.....=.n9B..s..n.[Q.TXg,]..=m....L.~..Y.%l..\.HM...r..5S9.<.....%\C..._5.6e....1G..Q\.M.....4."R...J..C.".L..!z..d......08MozlZ./F^.E........x.Nk....#eTn&.Q.PK.)..H..=&....@...\..(..w...{)I.y)..j....e.u...}g...tZ...q.y.X.5....{.........0.eQ.R....7.2..Q.2.....~.u2.S.JyE.}FJW.4..+K............o$&6......j.E.5....~\|.%5.H.;...eS.....o.._...5..v.]_..g..;. g.&........./....#qU. ....w..o.v..[..y..2......])

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9212
Entropy (8bit):	5.404453115943682
Encrypted:	false
SSDEEP:	192:dcI7XcpLHUhO/UMofZOr5V4oi3eR93lNgKX:d1rcpDUh0JoaMobl+KX
MD5:	31A20788C1ACB730696D0F390F50C0E9
SHA1:	884219849DCCDF0F588897BAFBD761ABA27C08B1
SHA-256:	FB10723323F2EF47153DF2C69EA0C625CADDA1F1A6444EBBE43D8AEC6448631C
SHA-512:	47697C31D53DFB4CCDFACDEA7BDD50AE4DC30EC8CB7BFAC0325D3A8C651EAF1E06825E91C659CA1B7966F1EF22E9E7825F49D8EF363689634085A7BB648FEA7C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.FOa=_.z("SD8Jgb",[]);._.$W=function(a,b){if(typeof b==="string")a.Nc(b);else if(b instanceof _.aq&&b.ia&&b.ia===_.C)b=_.Za(b.Wv()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("mg");};_.aX=function(a){var b=_.Ep(a,"[jsslot]");if(b.size()>0)return b;b=new _.Cp([_.Cl("span")]);_.Gp(b,"jsslot","");a.empty().append(b);return b};_.vRb=function(a){return a===null\|\|typeof a==="string"&&_.ij(a)};._.k("SD8Jgb");._.fX=function(a){_.X.call(this,a.Ha);this.Xa=a.controller.Xa;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.fX,_.X);_.fX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.$v},header:{jsname:"tJHJj",ctor:_.$v},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	29649
Entropy (8bit):	5.545452104367033
Encrypted:	false
SSDEEP:	768:V/hSTO+MerX/+QBUHNieLZD4EFRPRYHBCu4utyiVVl:V/kTf
MD5:	2241684F5D8066C120792F3514BE8163
SHA1:	5FE694D0737BEB7C2661848FFEA58170952CDECF
SHA-256:	4B13C0BDCD4FEECF3B5CB1084A565C6800A7BCB38AAF6B2C8CAA9125E0635E89
SHA-512:	59F9430FDB880DD1748D8DDBAC515833C1C1E71AD3A3CD11092D85A72E1926700EF5867C9413E36CE8EC85046F707D781FD0BC4AA44EBD6FB3D96E9DE78A4BE1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:400,500\|Roboto_old:300,400,400i,500,700&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1747)
Category:	dropped
Size (bytes):	232919
Entropy (8bit):	5.60706241833948
Encrypted:	false
SSDEEP:	3072:3DC6mk1k95DXNBgIPeJJ6tSMV0AeI/f7cMef3XLdLJphIcN3G:MDNi9JktSK0AeIL2fL9HhIQ3G
MD5:	13B2A8889D47F57F9953B1C9172F815D
SHA1:	35ED7E2772AC331CA0A2A23254B708246C078B51
SHA-256:	D33F109122429D28782A91FE9F083F3CA39725A3DEEBC3465B2D1A0FEC0A35C9
SHA-512:	7A15811240CE5DC09B2782E7A6A3469C4B540120BAB1ADB00D0B38FFA3EB554A8EB84F958BD2302702B2FB8C3DF0D703AD977AEBE2986CC8C7F705ED067312D0
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.qr(_.Fx);.}catch(e){_._DumpException(e)}.try{._.q("vGOnYd");.var HQb=function(){this.type=1;this.view=null},PY=function(){_.Pt.call(this)};_.B(PY,_.Rt);PY.ya=_.Rt.ya;PY.prototype.j=function(){return _.bs()};PY.prototype.start=function(){return new HQb};PY.prototype.cancel=function(){};PY.prototype.render=function(){return _.cs()};_.St(_.nAa,PY);._.u();.}catch(e){_._DumpException(e)}.try{._.qIa=function(a){if(a==null)return a;if(typeof a==="string"){if(!a)return;a=+a}if(typeof a==="number")return Number.isFinite(a)?a>>>0:void 0};_.Oz=function(a){for(var b=[],c=0;c<arguments.length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=_.Oz.apply(null,_.iaa(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};_.rIa=function(a,b){var c={},d;for(d in a)b.call(void 0,a[d],d,a)&&(c[d]=a[d]);return c};._.Pz=function(a,b){b=_.qd(b);b!==void 0&&(a.href=b)};_.Qz=func

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58892, version 1.0
Category:	downloaded
Size (bytes):	58892
Entropy (8bit):	7.995858140346243
Encrypted:	true
SSDEEP:	1536:zGRB4sZLebJD4gQL8CcWXYwk3V57Tt+5dLOj3aM:yRHZe94cCcWXYwCVrgdy7X
MD5:	386F2237074CC59495783195EA1F1295
SHA1:	81B3014B28B6E7EF2FDB39ED73D18EE38F1C36A5
SHA-256:	66A070C331573AA324FA2DEAC1A1B42B2D58E9660268555EE382D857E651E33F
SHA-512:	CEEF23D705E9D11C1FAD6D6704F2D1B3A59EE65B85CF240483484AE213E30DC2B59370BCD2FA61016256468A319B5033FB6F48C505BBCADA79B7489C1EA36CD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5Ofg.woff2
Preview:	wOF2..............58.............................t..(..T.`..(.....m.....h........6.$..\|. ..r.....1[&.q.....uW..g.;.T.6....d..^!.X.r.C...\|...J....M2....x....P...M.@...1{.%....lJ..N.&..8..n.- ..a.c....~:...pa0a5Z...E.^...i.@M1pD.K..zb2Y]h..n.h....~.../...-..X.h7.J..TR%U2u...6..\|($)i`......<.,..5Ex.X#...w/r.....W..3.J.G....Pe....b.........Y2.~.i..fG.....gq...... ..9.x....?.S'}S.d.C..;..L.%..+....=.{...9C....,.D.s...F..)2B....T..h.H...H.U`..............Y8...q...%...e.++#+}...tv.^4D.$.....e......`?.^o...P.Y..q..0.L.../.......v...%.1...,2.L.(..~.............<......4/c..zIIW..;+Tlf...S...]..b.J:.NA:..A........f....R..A.Xa.Ph..Ii.......B...........J..i.j@..ZW.........IV.....P..`.+!.2.......d~..<$5...S....{....e..-..U......g.SH.}...........~........,.R.d....P..t.?..E.A,...UI...z7.7..x8.....0.. !.cs.~....U. .)..l..{>.DdS......6...]x....X.=.*.@....T..\..9?O......bD.`D........pYq.S.t..0lE...WP... Cc......lZ.C.....Cwp..V/....k.f^......b+

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37488, version 1.0
Category:	downloaded
Size (bytes):	37488
Entropy (8bit):	7.993533567842416
Encrypted:	true
SSDEEP:	768:esvocDJKJeW3cmJF3+1Xis/PjgqMLohr1C06HbC4V7:esvowKJl3c9iKP85kN1UbCe
MD5:	2A7652831C7699009E0C25DABF93430A
SHA1:	6B0A143D883AFB8FF3CA2BF55B448AF8B68F2F89
SHA-256:	C3525FCA875BF7203E92F116E0C5532DD5B5FE0F0CA5E12C6C4C8B9BD77566E2
SHA-512:	5AB58B2A6B9A39A2F14E824E9FA0005D2A615A95AD1496025C1DB67EB6B7F9F67ECA26EC96665EFDBCA86AEE237300714E52705777503DE1D0F6EFCFD4F21D0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMPrE.woff2
Preview:	wOF2.......p......................................p...r..r.`?STAT...6.....X..!..P..6.$.... ..h.....[.\|.E.bl.......nRU...9...s..9-...C)(..Z.....".d......!..i.i...6E....A..f.-G.dL...L,%.Q....,..Qs..........'.kF^.3,#w..!p..Z.z..~.?2./..^.... U%U..#.y:.f...Bg....G......y...eT......;..~BPZ.=..4R.Ti...nb.oG.r..j...P..J..u.....4M.<.).Y.K..i.S.E...%-...>b..(AqH.kv.@"......h.\|g'.F...T.....lM.c\..^.{.w..)M..$H9...&.}2a..I...v.fL...J.5...6.Y...(,.aO..`...?..M<.x....A..N..!"O.).zU.7=.S.V....{..p.t.\|.n...Y.......m.....G..a.R.PI..(i.......DZ.lb..`.`ba.5.Q W._...9..A..O....}2.&t.)-r.3.).n..N...v.-.;g.a.'.l...6...(..}.#....Va4..7..`.C..(...,.U...uQn.s....5....P....,...T 8..v.<...j........B'c....Ah4Ba$F.Y.sz.eD..?..w...N".......).o7...j.l../E.5...[J=..O\|s...r..5.C..^7.:m.Zy.`.......K./....}x.?.u..............mJI%..UhiRK..._..ME....-6.......)c.....2............?..X..D".#..}.........mh..nm;...r@r.~....i..@..?_R..x.*..Nm....p8..p.i........\._...P=.u...v..W..eCmw

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	199537
Entropy (8bit):	4.705288692920627
Encrypted:	false
SSDEEP:	3072:ybBsNrYiYbRTdY2kfzYjEBtluJZ0+gwZC0IoAl8oDkDsDvU/J6/J9/JDJVQjj1P:y
MD5:	53BB04865802E54AC8AF8A4B671BFA1A
SHA1:	C330354F2BD383D4A86E0CEB9E93539457E09215
SHA-256:	42E25531F7AAC9B4400C3C6E9ED2FF0B60F2972C79553CD09293EFC17B2335AA
SHA-512:	BB951E8EEE524C84B2E939F93B96E7E4808FE3F0781F769134A2687B0D0F5C9177C26CB0DF1CB65063630A69A87A73862613B11AD61A73DB468DB56431F182B9
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="26px" height="10682px" viewBox="0 0 26 10682" preserveAspectRatio="none"><g transform="translate(0,6738)"><path fill="#5F6368" d="M11 17h2v-4h4v-2h-4V7h-2v4H7v2h4Zm1 5q-2.075 0-3.9-.788-1.825-.787-3.175-2.137-1.35-1.35-2.137-3.175Q2 14.075 2 12t.788-3.9q.787-1.825 2.137-3.175 1.35-1.35 3.175-2.138Q9.925 2 12 2t3.9.787q1.825.788 3.175 2.138 1.35 1.35 2.137 3.175Q22 9.925 22 12t-.788 3.9q-.787 1.825-2.137 3.175-1.35 1.35-3.175 2.137Q14.075 22 12 22Zm0-2q3.35 0 5.675-2.325Q20 15.35 20 12q0-3.35-2.325-5.675Q15.35 4 12 4 8.65 4 6.325 6.325 4 8.65 4 12q0 3.35 2.325 5.675Q8.65 20 12 20Zm0-8Z"

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44316, version 1.0
Category:	downloaded
Size (bytes):	44316
Entropy (8bit):	7.994860790146446
Encrypted:	true
SSDEEP:	768:8iY5YSLtv5kwY3p+6OWzOz3UaFfQOJSLUQOk484megEUNdg5kNaK3vUr/H9/zvBE:8iYNqz3p+hWzObpFBJW5OjWegEvOPU7I
MD5:	F4B0DF592BED06B7E1AC275945D8EE61
SHA1:	DBD15D6534D7ADEF8E4AABA1A89E7A2CE22B16FD
SHA-256:	C8FB82DF9421FA2DE18E11B89200EECCB188DAB713331F06C6C8782AD5CE5437
SHA-512:	BE5EA92F8F78869D5EF69D96B2688FD6637E3BAD65C15AA83E118C2C66357B9417993BECCD752B12A68A6C0E6ADB7D1E69F6FB1E8221CC608EC33726DED7C69C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNiSnc3jw.woff2
Preview:	wOF2...............0..............................$...x..4.`?STAT@..........O..6..6.$..^. ..<.....[......S.....t..`..k...W#..EJoVXt8~A..W..y...~J.......%..^.p.</."..u..k.z..4.P.8....q.L8 3.y9.X..........%..+.Q...#...].......}.p.xE6.......aYp......4...V........{wy...i.i^.IG.G.dw...7...5.,W...#ch....h..O..l..z.......W...Ge.9.R}.._....N......L...lv[{7?.$K.o......W...fn..,.+..^UIGd...'/.<.es..;......F....N@rIO..(......C..Mx....1.uo.@z.rw....b$....;.&P..'...a...t..?f.bq....^....#...?..=....<L..xc......!........{...3..g..+..X.......Dm......I...B.J2+v.3.D.E......]."..(...s.a...V..RCH.d7.@j!.R.$.......X:....l......;[.r..........3...............U...... '..;P.o.@>.e.... 7EP....#..R!n.:p.g.......l'..~.YR,.r.TG.....r.I.W.!.c/ .w..W..U..a/.....e_[........{..J..dM.F.._..[6[].lF.....d...P......~...3?.1...g...d.kK.RJX..../T.....C..y.c...P.p"..!....y.W{;\/].....e.P.....,....0...._.'....g.s\<FBH .w.nF..<....XAq.3..{.K&..%.Z.;......!....Z-.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1256, version 1.0
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	7.767364329523114
Encrypted:	false
SSDEEP:	24:QIz1dMQFq2XNS2sAy8z6ija18fYBKk2oVeypqRcvV5W548yqyujMtrP:J7o2O66W+8oVrp+cvrVneQNP
MD5:	6DD9A903A2068612E4F0D7572E284077
SHA1:	A87CE7B07CC3C4F09AF54E2310B97F4678935F7F
SHA-256:	35015DC730E404653F8B00639C287105BC4D09A58C9235659B99150AA1B220BA
SHA-512:	19001F23C7697FC0838D828A34D56F85658E188E2AF704AD117BE0A60063DEF37A8B960548E4BED40612F855CA9C26947382111634B841A9628B8AAD9DA48BF9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsWzLFneg.woff2
Preview:	wOF2...............(................................F.(.`?STAT..d....t.`....6.$.. ....[...c.H...xC$BE.4"S.....4.........t.b.L.Z.......Y.l..h../........`.!..8..I._2a.n..............)..o...om..j..t.....H^c...'<.u>..(...; .)o2>...a.(..@.BS..M..].....bs.[.7#. .....TYb.MI./sL.6u..2.`;X.0..-hS...wV..E($...gR..{q...9.F:.F:....D...@?.....?Q...."h._..."...\.....0.v...p..C..... )....@...P`8L`8...`.0......@..RB._w....d'D..........T..q.F....Q..v...u.r(.m.....%..x3B...!.r..[....{!..........S.$...m...&8.hHp0=...y......lyr.....({Wo?...bE...n~.X.'....&.%iAtQd..M...l....Z.....Nj.}.7....^..>.L......B........h....f...Cg.s.....oRP.G.....&.7..K..........9I...L.)S..Ub\|05~..).5..Z......H..ad:..{{..g8..0D.Q....G.LP.....P..........B......-ut..V!...T....m..#..[.)oEe...]U...M.\|.5LT..b.........d.D........J..-i.U,n'.o.!nm@...........F}6^....u..e..W.a...~.v(..c.x..._d....r^.).:........@.0....`j..XG...5.`4..W....K.c..5...<.7...%.<){....'(....N.A5.......bP.[m.`T.xp....+.....X.h

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72628, version 1.0
Category:	downloaded
Size (bytes):	72628
Entropy (8bit):	7.993648298573699
Encrypted:	true
SSDEEP:	1536:NH8XGACZrcOOWTRl2bvXPHCWTIBu3TTISSpufTHck8cFa:NHf5l2TX6tJbU8cs
MD5:	0F19855AD401FDEA3E11BFFE0D4E265B
SHA1:	44227668D70FC0289CDF988867A619E8E2960CE5
SHA-256:	9A0BEE97B056F9A0972D23BA254990353FD2FA23E11F0B4BD34B25E1AB4A0A4D
SHA-512:	339FF2A58B0DE425C410A21011901823B2D833356D5BFE586D251E33F5D594C68D62F016C779CA5509B46E648EF4809FAAA603029B656A0730ED5D46E7A48BFF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEls0qp6I.woff2
Preview:	wOF2..............P\...P..........................P........`?STAT....P.....T.....6..6.$..h. ..R..?..[.....w.....2..N9tq.Y.&...!vk...j...f..cl.t+;...pY.......q......I.....................G\|n......?s.... ..$@..2AQPD.Z...D...S.0...M..R......+!.Wky.P4.Z.4[..-....t....g.-V=....1@..\d..>.Z. f#.s!.#.....@...!.O..>...d.GB...qF#.9Gr....r.S_..X.#.:.#Sm.\(.!.7H...[.1.Q.+..x.2..1..}w@.nb-.....fY'.).w$:..C.D..[+..h4..u.fP.r..z.G....B.U(.r ..... v.......8.1......P.6/...Or.$b..'...wb\|..3r......$.....HI.p....6.hp)$.....g..."2s.gFh.&..$...+.....%z..R..R.V....9....D.tN.w.ts3i.I..&B...l\|.9..O..o.-..O.s......6.p..A)..2z[A;.b/....fi..%V..Q.kn..A...F..6...Y..=sy..q..jN..U....ae."m..\|d.i.K.T......p.D.............y.)...qu.^.\..I....5.;....y$.R.P.s.oV..+Vk..'.3...C...;...io....Y......}\|.6...lYhaf....]..d7...b..4.u....5.3F*.@..-I..$.....N.f....T.....C..1...?`.%dM...fHw.9.$0-..}.pF.ia;7.N...(.!.A........V..wF7.J`<9.J\...S ..i...3.cn52.2?........D?.Il......mE%.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 216x216, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1600x900, components 3
Category:	dropped
Size (bytes):	687032
Entropy (8bit):	7.791582217595028
Encrypted:	false
SSDEEP:	12288:fox13T5whPyF106inGptpvBZjUhFfHlLyWGc6IvxSczSkArrH9J1Fcr:fY3+5y/PD4FfHtzG67SkYLcr
MD5:	7726914C6A5FFA57D9B1F6BAA813BC07
SHA1:	638BFAD3359DC6D8AA4897063F5B14E33FD76476
SHA-256:	90D3AD5BA4B1510A49795163D948652C871E31949A619EA914934D12B0F849B8
SHA-512:	FFB33CF3828F881CB4E3A7FEBC4EFBC32CA3EE180F0817DDAC4A823B2BD35388941849EE4E0680933A97F36C03649BA5FCE29F71256D7DFAE61B1EAF517638D0
Malicious:	false
Reputation:	low
Preview:	......JFIF............."Exif..MM..........................C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....)^O...............o.@....g..~j....i.G.....z. ...}h......x..........Lx.}K...>..=H.T~_...5.b.co.H..Rytyt.+.#Q.......W...qx.._;D.}A..+....^...i^y.lx.....'...?j.../..]E/.._;.T..v...91....g..E..5.....:....{........%..<.6.7....$[?.J..b.........W........6......d..L.x..=IvG.....f...\|......d../.....X...vg.../.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20144, version 1.0
Category:	downloaded
Size (bytes):	20144
Entropy (8bit):	7.988855976137295
Encrypted:	false
SSDEEP:	384:p/Je0pAJ40shogIMZZuf7NA/0wh/zhQktl6k0s:p/JHpl0shorJ4NlhjwS
MD5:	214F75E42AA5CFCA07257CBF8C64E83C
SHA1:	BA4BBE71D4AB266BC145305217CDF86A7777137F
SHA-256:	A6760631FECFE59ED152AEB2C51FDCB515AC00CD4755449016B5B34813735D00
SHA-512:	E8D896C8C3509941FBCE96E2847838A520B3BC8D94348B1121840A1A2A45328BE939238423A03CDFB7823CF128EEC3190DE8B4C1924553D603EF02FA856217E0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2
Preview:	wOF2......N........p..NI.............................Z..\|.`..J.R..<.....$..}..Z...x.6.$..0. .... ..D.6..r.L......r.....y.B....(j''.L..)A.1.k...DEHA.O,...@..C;..SE.g.ch.{.t..F...?zW....\|.r.p..dO1..-.).Q.9.Z......?v..>......).9@."..\}.(.[....I.u......mc...`...#.[.Q!.%B.("!......``c....._....:.u&~......&'.I.x.>..R.......@.4...]\|f9V.u.4v.+...E.~=..{+.....]..&X...L...Z..>O.WH...Z..!.T..:..G..1....2.HR....1...U..N....}.D^.:`E.P.:._~....-Qv.....> .t;..[...B.pE.(T.W1...t.........m.....X..F...]i....$.]..e.VSt.NNo......}.=#.B.0.gds....h...ns.Tv..$<_....2F.Kd.;..\.F......B.p)\|.%.<[..YJ..l..CP....F..x{...}...f.&..Ci......;...V............./....w...+.I.B.Y...r.........Q...........X.-cL.g3)...a. ..D..w./x.V...Z.`N.25/..)M&...ys../.{E.ezR:V..2V5.+....;....._.[$J.r....A0tW.u....L........&T....~.z........10...3%.`%..urP i.9...M.i4M....L...q...N.........%...w.......?7>.........5.!..\|8..."N...Y.....E...M\|..._N..v{].._..Ex..J.7....aJ;...#u..W...Sk.9...Vn.]......D..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36840, version 1.0
Category:	downloaded
Size (bytes):	36840
Entropy (8bit):	7.993562127658027
Encrypted:	true
SSDEEP:	768:Vne728reVhZRDsdY38FWernlqO6oqd1/yc8Kmfd:VnmhrWZ6zhnjjqjyc6F
MD5:	3603078A7B178210AC17285E145B4A8C
SHA1:	D57FD925F10C47D039FCDA3CC8A2A12D23E134C5
SHA-256:	DCBAF64460B4DB78BA16EE6230D2C90215DDA58CE8C285348D624FE32DBC470E
SHA-512:	495F1BD5DE5FDBCB73865CBB3B5E966906E527E6E9204D62492F433BEB4E8E31F2934A64FADDF805E44A8488B36E8C98C12C70339177F6F10541331CA7F407D7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4Y_LPrE.woff2
Preview:	wOF2..............................................p...x..(.`?STAT..6.....0..r..R..6.$.. . ..P..#..[]}...M......".l..U....Nn..@.T..$E.c.8...g.....oJ.2..........%U.B...yr.... )K.\saQvb.Q.8.B{r.y.I....!.c.SJ%.rN.$.kI.WB.../<.....i5x}..\|a.km.YvB..jFHY%...I..S.k^L3..J.V[..:...ng.j.y......L....WJ.S..;Cg....N..oQ..O..E......c....\|..V.........S...O{..7....~.......}x.[.1F.......I..}DR5.7q.\|..."M.F..N.....P..%....B.q...P..I.^..fs....B...TO2...[]..csj$.<......$....}J.<vO...Z[..w.5.q..G.! .-%i."...&b....`.U"H....&.e.">a.r......=.....).Fjy...p...O.u.;@s.L....U.m}.lb...-e..."V~.........G......m......qm.n....).A.3.Y..x...@x...s.j3H...p.YS.w.p'..b...w.6..o[..M......!.....%<..x..C..&.k.XK.-.Z..z..k\|...........nr......x.X..q.........^....7X......K.I'..y{i...H.7$\|.ka.._d.l.q..".l.?.*W...`H-Ja..."{..zF...H....!.SqX>2..!....)...-.....S.?":Qz.....]....;...\..-...t..h'[...s.p!x..3]........'^.]f......L4../%X..>?1.....A...,@.+.i..?%M-..C.{.J:........./..E...l..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41676, version 1.0
Category:	downloaded
Size (bytes):	41676
Entropy (8bit):	7.994510281376038
Encrypted:	true
SSDEEP:	768:spGlqkWqlt2B+/4qgwfs/W4NoQBUVRwHseU9BNhS:sp+B5Ik45GwWorIEUDa
MD5:	C619C10C85CA3DD6D4B57CC59BA2A32A
SHA1:	92A0D8AC165CF6788BE6259F901FBA1994886D91
SHA-256:	C129C2C42B2F1D5AF9BD5B9858F0EBA8215EE3EBF61FBC99866E107B2C0AF4B5
SHA-512:	BEC65C9991CE74CED298E75A30369CFFE9D40F26B7EA10B7E16469D32AEDBA85889E063B2A571F0FB38B8E560F3CB26E7551A4FC6736F4EC2B6DBCE614E141A0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmRTY.woff2
Preview:	wOF2...............4...f..........................$......4.`?STATD.............6..6.$..^. ........[g......U..r.....+g...n.-..6H..'>K...;....+.v.......%.B.............U...<<.8jF.2.2\|.)P..pcv8/q.h..r."....T....E@r.1;.$C.R.Zr.^..Vos....[...nJv..:..]..$.p7%Sb...QIt.q........I.:..".0=i1.p.,..fh...8...\.?..n.o...O.....7j......YC........H.W8."...c.....O=.....wjXy..`..,.T..[..$...w.....^....\|...s....+.....Z....m..E...~.tl\|6......:X..........20v...6V.x....M..K.6%.oD.m....F..<?.?....=V...#..R...Q.._...#b#V.....)U&.T)!..PJ.....O.^.+y.c....AO..%I...r...g.....-Ff.0...;<?..........c.....1X.0b......3..T0...3...<E.......N.9-1.Y..=...#./.o...."u9.hl#T./D6....F."t..e.%,.s...&.#P..G..n..Y.....X.N..._h.j..~..j..*W.$./.T.>.....e......S)..`...~......Z.c.p.q.P.HP..oO.}...2..R..(S.Ph.a..0.{.k...o".x...t2..tB...r.}g.<...otO.I.....Q...a.).......3p:S.$.......IB........!Ja%..=...36.......SD..+.T^%.k.m.u.W...3.9.L.p.?..'H.MK.`.. .v.]...(...u...(...c...r.\|k.......i..]....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1510
Entropy (8bit):	4.0355432662902455
Encrypted:	false
SSDEEP:	24:t4qU/S93QRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Km2zQ:A/S9rU5I1YdtmMqPLmum1YUUZ/jTq9J
MD5:	CECA603BD198568DAB00E6DFC3120706
SHA1:	871C637521103DCE8F6DF9AAC0D1B62900D511B8
SHA-256:	F4AF84EFE90891185D9B29A841181CA9D26D7560864EA47B6CD709D3B964AEE3
SHA-512:	D3F4A52AEADEA52FDAC82C8B9A7427897359B43C3FBCF3E79AACBF30571B3482C991C5346069CC5DDD474C3814CF6507065C4914369C1236FDE641A934A08706
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5zM38 6.19c-3.21 0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	dropped
Size (bytes):	524019
Entropy (8bit):	5.741522639019624
Encrypted:	false
SSDEEP:	6144:XsqKPfwwUGby36EDFbeBcoD+hz7ompYAtTVe8Y9h62vkLCO1z8EDM+qYnFK0CSTE:FKtwwmvtTVF65smOnt2
MD5:	12DD093C2139B587557753F911FDD9C6
SHA1:	84574E075C0B1C61819B680FEE0CF245CCFAA1F6
SHA-256:	5619E6128C7785FF478F873F391ECA980D9CFC016DDE4C45260D7FE3FBD641C6
SHA-512:	5AFD25B30C19017ADF72AB34636B65E5C3610BAB6C3BE6BED09B5F758372CC188383B770DD41513D219891FC0CC42B3D6577FFB46DFF9F8046D8638A1A35D281
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.q("bCfhJc");.var PQb=["/viewform"];_.QY=function(a){_.Pt.call(this);this.N=a.service.kl;this.j=a.service.Ve.j;this.o=_.yI(this.j,8)\|\|"";this.H=new _.Su(a.service.window.get().location.href);this.O=_.Vu(this.H.clone(),"").toString()};_.B(_.QY,_.Rt);_.QY.ya=function(){return{service:{kl:_.HU,Ve:_.UW,window:_.tz}}};_.QQb=function(a,b){return b?_.yI(a.j,15):_.yI(a.N.j,14)};_.SQb=function(a){return _.RQb(a,!0,a.o)};_.RY=function(a,b){a=_.TQb(a);b&&_.Zu(a,"usp",b);return a.toString()};._.UQb=function(a){var b={"continue":a};a=_.qsa(b);if(typeof a=="undefined")throw Error("Eb");var c=new _.Xu(null);b=_.Js(b);for(var d=0;d<a.length;d++){var e=a[d],f=b[d];Array.isArray(f)?_.dv(c,e,f):c.add(e,f)}return _.Uu((new _.Su(_.Ada("forms-geu"))).km("/Login"),c).toString()};_.RQb=function(a,b,c){return""+_.yI(a.j,3)+(c?"/u/"+c:"")+"/d/"+_.QQb(a,b)};_.TQb=function(a){var b=b===void 0?!1:b;var c=new _.Su(a.O),d=_.Ea(PQb,"/v

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	dropped
Size (bytes):	21264
Entropy (8bit):	5.427139876048965
Encrypted:	false
SSDEEP:	384:LoRf9pXyEg9fgHW9hK/y+KvhMYoRsZUx1sqdpCid8gO/tuBY2ET:LoRf9419/K/y+KvhMRKE1TpJd8gO/tuY
MD5:	381A3F34E0579A00E97C40C9B8151A92
SHA1:	C2538EA94785DAA5F9A52835722726296B79F71C
SHA-256:	09EA0A5BAFCC5EA359BD2B7D9C348A8068C33686A1568764B7955C3A33594A30
SHA-512:	F26F0F9BDACF40A29C9C964A872E105D46FD055135C1B6E89927B9328C9DCF414216BD55D61733A7BBD8B5C8AAC6EDE18D5A16BD8D7E2EF55D9FA8816C7AFEDD
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var GIa;._.IIa=function(){var a=GIa(_.He("xwAfE"),function(){return _.He("UUFaWc")}),b=GIa(_.He("xnI9P"),function(){return _.He("u4g7r")}),c,d,e,f;return(f=HIa)!=null?f:HIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.kf(_.He("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.jl(_.He("y2FhP")))!=null?c:void 0,eS:(d=_.jl(_.He("MUE6Ne")))!=null?d:void 0,Zs:(e=_.jl(_.He("cfb2h")))!=null?e:void 0,Jp:_.ll(_.He("yFnxrf"),-1),B1:_.lGa(_.He("fPDxwd")).map(function(g){return _.ll(g,0)}).filter(function(g){return g>0}),.z6:a,mxa:b})};GIa=function(a,b){a=_.kf(a,!1);return{enabled:a,hX:a?_.Ld(_.ml(b(),_.Yz)):JIa()}};_.Yz=function(a){this.Ga=_.u(a)};_.K(_.Yz,_.v);var JIa=function(a){return function(){return _.rd(a)}}(_.Yz);var HIa;._.k("p3hmRc");.var tJa=function(a){a.Fa=!0;return a},uJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	dropped
Size (bytes):	2031
Entropy (8bit):	5.300532285140964
Encrypted:	false
SSDEEP:	48:o7kBUkwL3ALFemWDs97nR791kOkrk1nf23R/rIoparw:olLgF/WDQV9jkrkpwUyGw
MD5:	C3AD6ADC213B7FEF3DD7F84CC4CA411B
SHA1:	D8CBD564DEB55210D121170A70FB2FECABA6C12C
SHA-256:	F3BC232BC2C9256AC5347F5921D88D9A3B1EC31F7E99F49B98992C14A7515FB0
SHA-512:	604010159DEB1EADC76893B5B2339EF9924215207558EE3C546F0624D5DB9E531B8155AF0CB57DC09A5B93C2881A2E5E90F7B51BAF4FE58AC1E7FC7930491220
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.lZ=function(a){_.W.call(this,a.Ha);this.window=a.Ea.window.get();this.oc=a.Ea.oc};_.K(_.lZ,_.W);_.lZ.Ca=function(){return{Ea:{window:_.av,oc:_.MF}}};_.lZ.prototype.Up=function(){};_.lZ.prototype.addEncryptionRecoveryMethod=function(){};_.mZ=function(a){return(a==null?void 0:a.Np)\|\|function(){}};_.nZ=function(a){return(a==null?void 0:a.L4)\|\|function(){}};_.iVb=function(a){return(a==null?void 0:a.Gq)\|\|function(){}};._.jVb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.kVb=function(a){setTimeout(function(){throw a;},0)};_.lZ.prototype.aQ=function(){return!0};_.oZ=function(a,b,c,d){c=c===void 0?"":c;a=a.oc;var e=a.UP,f=new _.BF;b=_.Wj(f,7,_.GXa,b==null?b:_.Qc(b));e.call(a,305,b,d,void 0,void 0,_.bUb(new _.AF,_.aUb(new _.HY,c)))};

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41284, version 1.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.995064975939542
Encrypted:	true
SSDEEP:	768:cfG0KEtyj2eCaD4YcktFD3n2Eaxvgg6UOJ47dDNITDCJeFqtlBcCi1FWOLtgYmu5:cfG0KEAj2gD4YBFD32BbPdimectlBcPp
MD5:	87595E01EADD10489540C2BC9532C831
SHA1:	E3EA9372FC50308AFB080F0AA0C1B544873E7896
SHA-256:	BED2897761BB0A09F1993AB40B94D35B1E2B3C57039379B888503C6EAC7DCE70
SHA-512:	62B45A99DDDDAF13A857380714567ABA0386E2C0A8A89FB378C1123645F693FE4062F075D143B153021FF556F9235F76275F3D73DC79401FCCC29E405AB09F9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTbtM.woff2
Preview:	wOF2.......D......................................d...z..f.`?STATD..t...........\..6.$..4. ..\.....[.y.........v.}.$.oU...i+s.:o...,.}6"v;\|t.......?9...i..PQtn..]..S....D.V..0s...N.y.4....."S....3.(...c..j%...-...Q........ .{.943.h.....N...}..P^Gt....._U.....\3P..k...q..C~...%..eCYv..>.....u.....Q..kJ..4Y.~%31R..2...H:.{...Ue.j.!j....-z..$.a...$N.$>4I...l..a...._?../.L.b....]..n4..Fe.j...&9U..j..NX...D.U.E.....).^.KR..t..........L.o..P..U`.z...N.G..~......8<$.....(Q@..$..$$O@J..+.".%RF......h..,..}....%.k.m....>.NF.....u.y...O.+...`.0;8..i..).;.z...\|s....B..;...!R.kY.3..\|.g..i.\|.f7i:.J)t1dI....A.D.........%..T.U..h.D....a.'AHO.<.wo.y...B.'....1.e.....X.....G..q.M;K.p.x"M.Q.g.G..\|X.w......."./n;.i.......b>..........M.J.I!D..A...s..J!...<...hx7.n...t.-.r..m.$b....m.B....B....~.:UI!...{.Bd..!,.=...r...@.d`..~...sw..d..E..=...C.U.$%.M!...Mz...O...`.W...2....N......R......9...F..r..'..?...{..h..a.../.@@.OZ...:@......"y?>c....O..uw..h.H

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1416, version 1.0
Category:	downloaded
Size (bytes):	1416
Entropy (8bit):	7.811377924682188
Encrypted:	false
SSDEEP:	24:N2bmsAaPNl1Yn3NXvem3NhvRcpd8CE/LZnnrHrEV9bw+k1kjXriNClDuK/PVa1Fp:OmsAaPNl29Xb37vRcpdO5Ezbw+ukjXrg
MD5:	E2D07BCC7B3C68F09F3517CD26B496A9
SHA1:	1BC266CB846B248865B43E53CCD7C8117A70B7BA
SHA-256:	CC93B0C6CCF01063B9788530CA2389636059624B18599DE8EDEF8D4054255474
SHA-512:	35DA3761609813625AD4A9FDF9253617CE61EE350F08B2915ED38C66A50DDC2AD35B5D0D0E4B8993103E4E40A116621FE2AF2D0A9C4D71D18F9B1098B82215D0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QuW4.woff2
Preview:	wOF2...................1.........................4.`?STATH.d....x.=....6.$... ....6.....Q.0N.....1.C\...d..T...'K.......s..fC..h.....F..fiM.m%j . .B.(.40fBM..9...S/M})...K..6.j...?.ok....n?Dv}..?_W..V....Ewo....Y..x............<._7"Pa.Hd....r.E..n6:.::/}H.dP<...w\..... z.....H)'...,....Y.....e...b)...k...2..<l..8...~gY.U.M"R!.zM2.\zM\.\|...c......@..0....h...s.#...]r`.!}....4..d.&......gf..n.d.....v>\|s.P__G..GKBa1w!...#!.A.....mNq...Bw.P"p...J..5.....D..Q'...B..L....CK.. [T$,.`.G...IP,Y....A.J.l$6..A.}...`..8..;..]u....&.[....m.@..]z..C......'Z+.l.4..Xc.. ...%.d....x.s_e..P..J,...81#...>........+.8.K!...E-C...%.,......'.....2{Uy.4.....xH.....B.......Mfn......`.q.X7u0r0...q....q..d...O.b$'...r.:PW.C....P..S....XS...2.....K..P...u.S.bd.@k..'.o.:.z.=...?/.y..m~>#\..._.Fi..w[[.<.t.i.cG...8..`.d..R.9.L....D......4.`.@@$Xjp}.1l.G....]$.;..L...9.E..o..\..e..#...f..p.=.~.qp..)J......".L....:..].....oS.u&....F.6.....5....H5.eai..~..x.[F...E..y.7l.m...s...

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3868, version 1.0
Category:	downloaded
Size (bytes):	3868
Entropy (8bit):	7.9445535347732665
Encrypted:	false
SSDEEP:	96:tlcEXWJVsupXQ0scIkvIEXKDhZBvoKugKyQ1lt:tlPZupX9MEsZBvAzyQ1X
MD5:	162BFED84902AE22C4B6E7F3B359D9A9
SHA1:	4DE2F221539118A48EFDCD673399506B75E49910
SHA-256:	C837D1781023E674AD4077973A7DDF830E90D8CFAE99DC5061550E174A3F08E9
SHA-512:	6EEF0E71069144E19FC027CF99C4A15B3B45D7B684F31C8FDB0825E10DF1B3FE05AA5DE6359288F1E60DA0889C636B2BBD5D34C0BF02C0D0D13A72299455A3F1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw_aXo.woff2
Preview:	wOF2................................................6...`?STATH.l.\|.......8.~....6.$.6. ..~.W..(...Q./......5$..qp..J)Q....J.. 0<7...&/.v6B.Y....w.jS.[..%..:.....49.h....n..f2..@e.).J'K.BMBC.a..R.JW.....'.%V..c.^@....5....\.\....X.......o..<.......U.P....>....Z.6.J%<...Y.+i.[..^/..i.....<..4.. X^..).YmI.'y...]4.'..0....{.....B+X.lP.^?2......Pz...tj.......@...t^.WS.....$.j3...x.]H...j..i.T.....?..?....G..v...-B.M..O_..\|.2.-1...,c....`.~iM.X..qscj..6.vn..%.........<.`.~,.............E..f.,.@..z...M...?....Ax.h=R.....e.....Ff(....-,........G.....Y.Co..#.eU.K....".wv...&W.BHE...?1.,.3.d.5.........[.........;...y....]Y....]r.UW^q..g.~..../..o.~....gO.<~....{w..u...kW'..0uW._...Xsa..u...=s..l.k..>....QX.)\.,z."..tK.....\|..i..6..1..T.JV.Ah...}.#.)-..\..ju..N.U..d.j=P.:...L.+#.U..n..b.5..M.xA&@..M.`..V....1.\|.C....f.f.)...m=WzM.PD5`...1..G.8C............fP..O. ...Q..7..4....1..q.m...L}I......b.G.....MLV ~.1.b..W..$..$...#Gi$.$...N..2.Oj.X{Y....j

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65288, version 1.0
Category:	downloaded
Size (bytes):	65288
Entropy (8bit):	7.995231949069373
Encrypted:	true
SSDEEP:	1536:fiRY633pYvbxy0Sip63WPUK3lnbRCw06C7Cjmf0Z/e:uYZvZhp63WPUK1nbRCIC7CjWr
MD5:	A4BA8684EDFDDEE2B96C4289802B59D8
SHA1:	A5E348D230BE06CA1183E2E179C797986270AAA4
SHA-256:	50F2422F6A75BB554D5A8DB39B42FBAB581C0811CA56C50AA47AF8BC14727C0B
SHA-512:	F90E9631C766E8E5DAD2D6A941DC89D982066F7A1AADD497A4BB9B9E6F2A46760EB0C7C7D613EF2DD79A4912F748173FC982EDFFD6FD451A47FB2303E92B7975
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v14/rnCu-xNNww_2s0amA9M8qsHDafY.woff2
Preview:	wOF2...............\.......................................`.....d........`..>..x..6.$..l. ..P..K..o[.........G7W/.H...6@..Y....G.)..Z..h..y..n.g...nT.n..\|...............'....z&...$@.....Cw.U..j.,.S..%....$M.JB.F.%L.....tA.........Ys.+kGyN...&..ns.!.m...t.g.L...J.&e.'.C>H.2.u.:.;.^s]v...D. .e..z....'-.W..=....B}..N...t..+......iF.C..._p..o..,....M..r.P7...g.^.\|.U.0../..wu(..D...]J..\|P3..F..)..PVb.A..&.].=...o.j.se.....N.....(..i-..`.k...../%..a..y.....thUS.....4...^......St......!.....T.m.5......}..7.m!G}.,.9N\|...&.....RQV...O....J.Ko.+.A..R.o../1..y/SL.K..../8`i.$.g.E..Z.).1a...../.%...G........m.O.Rk.)R...........H\|R....I.$.........~.......\|u...........+.o[^...Ex....v<]\|.a{..1...$.xM&4.....X..j,f....p..j<...;N......5...7.!..h...$s..=..6.....C....Y.E.(..6EQ..H....C4.....l.......T....QD....,b.. .G..DT..,...F1bSk4.1.Fm.L...r..4...O.....<.2C"$..&.=..)..!...r.h.......}.}.G.;.../"`..F.H.HA...).,,.DT....E..lZ7. ...p....c{.]..@.6I.X.Z.....[...

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.530541089861216
Encrypted:	false
SSDEEP:	96:o6AXxwxcfkdicf6mtYtcFJqNzOWSZWf0Wwh1Xw:iXx6cSRteNNt0Q
MD5:	F0B57E0A717439E30C170736B8602DC2
SHA1:	EA973BF2E633AF78AEBE945DF4E910F7CB6B2E65
SHA-256:	3BA62BEF8A7AC67E60A104E1768DCFBD8539F5BEF82077FBCC8BC6E647242B7F
SHA-512:	7E257D2C94C0335D600D75D0733E7E4FE52F4D498CB16258E8FA03C3737130900FCCEBEE9095BE2899209D0486BCCFC7276158B999C216225E554E68DCA16346
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Xya=function(){var a=_.Ke();return _.uk(a,1)},Lu=function(a){this.Ga=_.u(a,0,Lu.messageId)};_.K(Lu,_.v);Lu.prototype.Ia=function(){return _.lk(this,1)};Lu.prototype.Ua=function(a){return _.Ek(this,1,a)};Lu.messageId="f.bo";var Mu=function(){_.hn.call(this)};_.K(Mu,_.hn);Mu.prototype.Cd=function(){this.cV=!1;Yya(this);_.hn.prototype.Cd.call(this)};Mu.prototype.aa=function(){Zya(this);if(this.uE)return $ya(this),!1;if(!this.lX)return Nu(this),!0;this.dispatchEvent("p");if(!this.iR)return Nu(this),!0;this.sO?(this.dispatchEvent("r"),Nu(this)):$ya(this);return!1};.var aza=function(a){var b=new _.Zf(a.x6);a.jS!=null&&_.bg(b,"authuser",a.jS);return b},$ya=function(a){a.uE=!0;var b=aza(a),c="rt=r&f_uid="+_.cl(a.iR);_.Vn(b,(0,_.Hg)(a.fa,a),"POST",c)};.Mu.prototype.fa=function(a){a=a.target;Zya(this);if(_.Yn(a)){this.VL=0;if(this.sO)this.uE=!1,this.dispatchEvent("r"

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64968, version 1.0
Category:	downloaded
Size (bytes):	64968
Entropy (8bit):	7.991086223648761
Encrypted:	true
SSDEEP:	1536:WHzRKTLYRYDl8vt4WqygfVfyjuCCjMto7zgxOb/LlItk41fR8V+pF:WGLRKwygfVfy5CAKIxOb/JItRL84pF
MD5:	38B24F2C1F13FF0FE4D75754439192B1
SHA1:	B85F7DC43D9DA69F8C5034F682D047EB3C5B6B9A
SHA-256:	61514A54C59FA9A216CBD4BB4FC24B58E3956088D4E0FBC85BB63160E874EFCC
SHA-512:	431383CB96CF7DA1E372F46DDAB4AD0DF26F86370EF52772BBA352D46CAD51B06D0662217AB945D217C1B040AF228BB114DDBEE5D3C708D589AFE6DEC97167E4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEliotp6I.woff2
Preview:	wOF2..............N....a..........................P...,....`?STAT....P.....h..U..6..6.$..h. ..j..?..[....^..v..\|.Ia@.Z.T.&1..s......m....2.bZ....i...H{.O...m./..D..\|.................,?.rs.._..{...&7....C...@.X.V.(>x..H.B..IHk&>..(g.PV)$.9.^j.HM)...KPm..I...]...:...^....Uq]3.q.b...JM$+..f...0..y-.E.=j..C ..bP..(^..s..x2...F..9.J..=.K..CE<'."..#n.......wD/..H'.~...r..\.bBRZ.....]..g.M..-.u#'j].G.&?Us/..W......r...b.\|.:U.m+\....-.W;...7.".Df.R]...)..;.$l.<!=..i.\|.Wt.Y...Z..Fe..=.^....z.&...;.R...;,...G..ic..#...Rg.%..M.?.N.I.<U.U..$.c..hh.!.KY....jp/.zP..}.....V5.....<.....4....A..Q._...9...i.......e.J\:.....hh../.zR...[g........^. uu'D[!..@c5.......(\.`.ct....4.......!......~S./...{=S.M..x.[..e...e..J/9......R?..LUf...$..L.....G......7.+.?2..NZ.'y.....%1....j<........t..w.S..OxfN#sv.b/..cw._.-x@.I.....G...a....^.B.&../..~?S.G...L/..<....h...yWy...k.,...e..w.3}V..dE]Z.....?.....(..q~n..Fb..`....jC5t....2...,....a...? ..S@.7...%b.%Z...*O\|...K.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3616, version 1.0
Category:	downloaded
Size (bytes):	3616
Entropy (8bit):	7.930386543715654
Encrypted:	false
SSDEEP:	96:DpAYv1g/yISTOyROLP5yb54Sfbib1UPXavmk7iD:DpZ1gqlTOyRA+54SfbiskGD
MD5:	710CA7880CB166E61C4E6F32EB58CECB
SHA1:	ADB82ABBC275F90C47EE2082275343FCDCFBD6F3
SHA-256:	3E34CAEB1570F09F03ED4AEFE201F53139321BDF043516388A8DAFCFEBED66BF
SHA-512:	F1E24F80418BB83E8D6B9280F6472D48C6654283F4D172FA776B369A250CF80EA48A94F596816028809FC7219E54107DACA6D5324AA2620AA4D654C2DE4BCDCC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v14/rnCr-xNNww_2s0amA9M_kng.woff2
Preview:	wOF2....... ............................................`.....d.......x.\....6.$.0. ..4.=..o......l...6R.W......AD.....a)....`..;.....eS..p>...If.'......P..RO.z..\|.....+F.\..m.....`..%k9.43!..m.1.{........m........=..>0X......;lQ......\.=../9.A...Zj....@.#..h+t.......$......MX...!....[a[_.j}..mC.YsQ...{3y....76...G...........T.4. ......O.O.!..... x }..........y.(Q....\6...0.3d..oA.+......S.`....A..v.4@.....9...`.3..y......t..Ad\....ps....H....&.N.6....S..x69.."......A..G6.j....+..p.3.a. ...t...C......v.....1..l...h.o~....ns.k]...../..aM@=..zW...g.j..6....n2..(1`.j.C...8.d..'.O._t:..+.+}..&l....YE^.zs...v..K./...E...9..H...<..O.....D.&.y%}...../......q.. .s......^}.C..\|..Z.....+[..Z1H....n.q\:.......#%.c....Y^.?&0j..iq.......3..K"..!....4..I',....P..9]N......~J'.._...\|a...u]..jRS.tT.....d5.i.......i..e#,.ZtP.......7. ..D...........%...$.f....L....F.H.. .t..EB..j.yoP..N.3EUU:QL....u..#........#)j.#.....ZR.&8......D..(.....mR..,..>R.uVP..J;..p...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2484, version 1.0
Category:	downloaded
Size (bytes):	2484
Entropy (8bit):	7.903859306518773
Encrypted:	false
SSDEEP:	48:/dSIWk6muY0rJJarbEgdzzTTm9fLEZAlMfJLn5HWSd1DX3Z:/0X9Y0rgbt1TK5LEOWfJ52cDX3Z
MD5:	9160B78EE0B90045C930EC35D1C3A91E
SHA1:	3DA7830A860E809B29AF6A65017D56A1FA121892
SHA-256:	BF2174B338F1EEBF563FDD9BD3909F5269B63AE05A9EA26A738870CC6B504B08
SHA-512:	A9B5CF35FC94666CA48BC4002AA72C8DD9DD79D5ED62E69B8ED823F8456A2978EB4577969187DA8733D3B927C9F052439830ECE8E2793104B099DA43B262471B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEliotl6Z8AA.woff2
Preview:	wOF2...................X...............................X.`?STAT...t....l...(..6.$.L. ....k..............6.5z.3r..C.IEM.\^x(..Yp..=3......>..n6. W"V..]-)`..=].$.,+<.......j....Y. .K......xx:../.8......7n....).KZm..7<../.!i..L..C.B......s{........X....(..k..X..`."^..R...gsw......xR......(f...Z)....p6...8.....W}@.....V.....a......w....,....i.#....b...H8or......e\|..b).?.....S.L....g.._.#...Y..h..e..zVD.[E.y...L.m.a.2...D......3cU'.FV?..R...4.....f..2"\........E...HU;...i..[...[^wZn.....5a.x}.i8f ..Y}...JuEi!.Pv...s'..V..&.6..M..!....L.l:F..........X...{[>l6.s....[.O.....&(..{....z.....).!>rfF....2$..s.d...XS.4.L......u.....J..0..W`.a..]..$..x.=...4.1......._>M....[m.).b...8.p.!...`.....q.&B\..........9.t.....E.G..-M..T..`.7M5@............1.C...N..I...H2}....a.$....{z..L.f.$y...g`.0-6Hm....u.z.q..H."....I.cc..{..J<8A....l.._A.5.i0.`..t.D.U....4.\|\|;N.G.Vo^dk....FMFt...........'~.U\|.;C. i...&pr..7.t2.c(.p.N\8.h..g..0 $y...5....u]..{../.S..!.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46840, version 1.0
Category:	downloaded
Size (bytes):	46840
Entropy (8bit):	7.994725589879299
Encrypted:	true
SSDEEP:	768:pBa1htdmJ4nDdfoc4qb4WcelHHWo7hW9Igq0AapIqFjiIparJ1KQCiVOQXV47G6x:pc/bhDr4MLlWo7hzrn0Iq8IpMzfvV464
MD5:	FA1ADF616690586A617E2F265AB761B0
SHA1:	802AF2A60A925A68A50C3BD3C157D284E1B51362
SHA-256:	28AFB7554B3B29A5587799EACC92FD889378089FD568E5C8430B41D83D012B3E
SHA-512:	5C2AD9BC7116418A763A8D2AD6D5B458AB38480D2B31441EC8FD97E1FD708535E447A8991211A4BAC846AE5F0AD9FAC206FFEC1D07C3B1523128E6E0477FBAD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuyJD.woff2
Preview:	wOF2...............<..................................h..8.`?STATH...........F..r..6.$..`. ..h..r..[h....nE{...9.dsXJ1L...n.SV.......^mYF..td..a.....................S.h.unv.jf.Oa.> v!1..#"...G.\r..&.a2/.0./V....T6?.%..G.tyc[...+..H ..9.v..J.}A.%%...M.D...$.jX..............u."...y......T.&.A...R........,X.z...;C01..F..Re#E+H.].b4T=g...S.z.[.{.&.sv....-.....{.{g:...K^.-.~...7...L..W..v.....p4.\.F9......3....Q..'.LO-..E.......W..?...4!.v.G."'T..zV..dsU.$..T<...tM.T...y3}^E..I}......"..bi.q..\|!...I..Y.>..,.9......lc.....=R..C..PTPD,DT...0.0..#...........X ......y.m..;........ZD..+...?...Z.4....5bm_..m..5.[......>.... 6......1..`0.....F7..P..{`.s".........}....n~.[o.g.........Z..Z.".....2X...Y....~k...(..K.....!4.H..{>.o.:."!....A_M0.2..9._[..-..p..........h...YB.7k...k.....^..?..?..P..r._.M...d&..O.:..g....oU....9H7..(.}..}U...z]...-. .Y..tw...k.a......9..J....V.;..g...'.p...........6.8.YGdc......H.D.i....K...e....[$.]'..v...*).C..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50664, version 1.0
Category:	downloaded
Size (bytes):	50664
Entropy (8bit):	7.99441041171138
Encrypted:	true
SSDEEP:	1536:SGOZcxOtnS9UcAJ0dck+XFTh3KttBOI0Y9siZGkbS9:SGjQS9UcAJ0dck+X5JKBOPOm9
MD5:	2EAE80C528D1D7A39C57805DE3E9C799
SHA1:	37ED517E2F44EF14D8F2C4679F9EAD44B050759F
SHA-256:	46B9F52EC517DDFAC84DD566720D00CF3C54AEFF1D543AA9C95FFF830985FA13
SHA-512:	84DB87D648A4823380EDE80089F3E1683B11B70703CF5BD540A11C55859AFC2D063173AD89C9C448AA3A8C855329B242E032F42AB7C8E384E85B82E5C9BF3D98
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-MoFkq0.woff2
Preview:	wOF2............................................. ...Z..h.`?STATD........X..>..f..6.$..H. ..L.....[....r....@..mp...M/.6.MJ.sl:.....4..m................c...{.T.4..[.m........S.i..s_......0..6{.).``..&.;B....rHI./..b..` .)..b..,.{.....f...QJK\|vh....VuW..?...M.....2.........8..b.9@B..{.Q...'S.\|..&f~..x..8....!%..k...x...%o.)./])[...N.G<.#.!/D..U.ZN'.e..b/.;LL.."..B4K.nr.$.R.~..Ez.A...C.4i..o....4.....o!.z."...'u.z..Hh.....KO.T........T.......w=..=.swe.W..._t^.....O.Q.!o..N.]l.! ....D...k...tkv/...I..+...B(R..&"6.A.<M...ED.""(B.4...@J{l..."6Zx.....U.3./ ........9.......r{w..E..V...m............"-....PZQ.Q6.....e.B.AR}.'...f.....+..'.....5.Dl~lj........-.RJ..T2.7...p...B......Pe....aDCX.]..Z......"4.t..b,.j...<.(.Au/M.j....O.i.P{DE`KN.P....\$]....U..B.R....3....hi07p.....ynx...0.@0...3.B....i....b+...r.4..6.L).pq.c.nM.p..;.t...+.+,!.....L_(.......x...m._{..FB...h"Eo$.J..C...$..y-6.........5K~../#...P..J...O......++.8.5....y..q....L...V.(

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (391)
Category:	downloaded
Size (bytes):	1609
Entropy (8bit):	5.263979402825174
Encrypted:	false
SSDEEP:	48:o7Re2n7saUpaBfYgWmEMxIxNpA7DbvbPrw:o+paBf5Wwuy/w
MD5:	5A3E89F4CD54E585083556EC44CC8927
SHA1:	D2266F227B69876070A1E5AB6F7AA9DC89C1783B
SHA-256:	0D669E32B176E6D2DC8728329938FF5802A653956DA9C500445F7C255C070EA0
SHA-512:	7049B8A40AEC34E2E0DFDD59BA4F156069AAAB08FA9AE24B78AC0E6C859B208325E96FF06D7DF719C5E9CA32C4BBD4B3040F3BBE8A5BD3E753E4352A2BDB5498
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Jg(_.sma);_.YA=function(a){_.W.call(this,a.Ha);this.aa=a.Ya.cache};_.K(_.YA,_.W);_.YA.Ca=function(){return{Ya:{cache:_.Rt}}};_.YA.prototype.execute=function(a){_.Gb(a,function(b){var c;_.gf(b)&&(c=b.jb.hc(b.ob));c&&this.aa.sI(c)},this);return{}};_.Yu(_.yma,_.YA);._.l();._.k("ZDZcre");.var q2a=function(a){_.W.call(this,a.Ha);this.aa=_.KH();this.en=a.Ea.en;this.E5=a.Ea.metadata};_.K(q2a,_.W);q2a.Ca=function(){return{Ea:{en:_.NH,metadata:_.y1a}}};q2a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.E5.getType(c.Pd())===2?b.en.Rb(c):b.en.fetch(c);return _.pm(c,_.OH)?d.then(function(e){return _.Ld(e)}):d},this)};_.Yu(_.Dma,q2a);._.l();._.k("K5nYTd");._.x1a=new _.wf(_.zma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var C1a=function(a){_.W.call(this,a.Ha);this.aa=a.Ea.mS};_.K(C1a,_.W);C1a.Ca=funct

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9212
Entropy (8bit):	5.404453115943682
Encrypted:	false
SSDEEP:	192:dcI7XcpLHUhO/UMofZOr5V4oi3eR93lNgKX:d1rcpDUh0JoaMobl+KX
MD5:	31A20788C1ACB730696D0F390F50C0E9
SHA1:	884219849DCCDF0F588897BAFBD761ABA27C08B1
SHA-256:	FB10723323F2EF47153DF2C69EA0C625CADDA1F1A6444EBBE43D8AEC6448631C
SHA-512:	47697C31D53DFB4CCDFACDEA7BDD50AE4DC30EC8CB7BFAC0325D3A8C651EAF1E06825E91C659CA1B7966F1EF22E9E7825F49D8EF363689634085A7BB648FEA7C
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.FOa=_.z("SD8Jgb",[]);._.$W=function(a,b){if(typeof b==="string")a.Nc(b);else if(b instanceof _.aq&&b.ia&&b.ia===_.C)b=_.Za(b.Wv()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("mg");};_.aX=function(a){var b=_.Ep(a,"[jsslot]");if(b.size()>0)return b;b=new _.Cp([_.Cl("span")]);_.Gp(b,"jsslot","");a.empty().append(b);return b};_.vRb=function(a){return a===null\|\|typeof a==="string"&&_.ij(a)};._.k("SD8Jgb");._.fX=function(a){_.X.call(this,a.Ha);this.Xa=a.controller.Xa;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.fX,_.X);_.fX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.$v},header:{jsname:"tJHJj",ctor:_.$v},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2708, version 1.0
Category:	downloaded
Size (bytes):	2708
Entropy (8bit):	7.889250991886075
Encrypted:	false
SSDEEP:	48:2qhpUIYsa+fy6k4U9/mKlkDC1YaHQ3ZGVSyCfCY6JHSe/Et1iF:Php9Ym66kVHmDIYaHQ37yCfIJyeO1iF
MD5:	B12C8BACB108B452B1DBB90C3D1FF1D0
SHA1:	ECF97F8E8FDA216564CFF508D3B9E126D8666372
SHA-256:	588A0396D786BB25120D5B559B9D546C3F276BC5E17E9D6ED1AD609DC0871CDE
SHA-512:	A0C8212C5291E5160B2125B76CAF92F8DCB9219DE39CAAB082861C6B5FC4EDFEB1B1D13A07B458CF61E4E6EA551F63DA24A24E39285A00226B108721B9E35D11
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDRbtM.woff2
Preview:	wOF2...................4.........................(..:..(.`?STATH.......4..4..6.$.`. ..x........QT....#!s.S..%j1"[.8\Z..(..........T.&.@w..uuU.<.."...x.h..j@\|...p...R'FR.G...w.lMhD."..D.*D.....&.0}.p....f...}..m]`Q .4"/...Su'..B#7.h..V.l.t..v.lB./b....0.D...G.G.$.!.+.)...DRL.7...........`..@6..J...@.D...C.. #(........D.Ic;....5.#{e..U._.F_.K...`.%.g:_......!.V.?..{k_....@...=.$[.+$. 4... .0..4 .J.1.)..=....\.iW....=.".F{....y.D)......~.L2.8H.'G...>.G.........^.f.........$D...PrH...s..9.y...n...X:Ig..N.. ..v"......-..!.....kuy..=t.T..b...r.6...Vr.us...[.=....}.e...NB..LB(..;2.pD.T$.W.#..G.....u.9..(2?..T..B@wq..0.W"'..5..0...$.....\|.-........../...@..!yD..:[.....cb..=...Ub.#.}.TD.....g.M2=........O4."....I.j569'j.....a..l.}...Z_.&k.#.iBH&.......5.9.\|2.....+....=(/.3...........);...(...x..>^rx.K.....dB...y..\&....[.+..Mm......32........A.f#.^f....V..[f.P....Z....I{...\X0<PS../.F..$.IW.<..=....c.>!..w.7N..Gf..^.w..@_..#Pp... .].......z.h..q...t...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	709248
Entropy (8bit):	5.597883960152324
Encrypted:	false
SSDEEP:	6144:TDld/4Y4oi90i/UrFAYdcjg/eMCTul28IblkNuHkOonQRJ9ergE895nJ:T5Z4Y4L7/2fRl28y/
MD5:	54358B6B8D9377A6F5B2A33D3C6F7FD7
SHA1:	611B57B58D1FCC7A911E4CB2A30DB973D3AD0B11
SHA-256:	FAD2AE60B76998A57C6790E88E1BEEFD6F630B6F8302AE1BE0F12469DBA381FB
SHA-512:	9EA05FAE68ACF13A9C0A78EE6AF472B6B15048B8FE0DC737120DF11B7B5ACC82091AD3BBAC428381DFF8B132C859394E6AC242516691E33DF179995A588CFEDE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,niKKCd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,oqkvIf,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57612, version 1.0
Category:	downloaded
Size (bytes):	57612
Entropy (8bit):	7.9962205728688245
Encrypted:	true
SSDEEP:	768:LfYaMHqDvL0rZBalyepBnWYRDgl5vlGmwhAo0lHz9AMkMT/C1hwpDltJKgE08RNW:LfTA1iyeXSjlplTCMkMT/C1GpDqwNfN
MD5:	10D2BDFD7A17F5E0210C90D99A8B5ABB
SHA1:	89CF52504233C328782A7250F56DAD603FA74A91
SHA-256:	D8977152B314FCD5D04BEC050367C0AAFA91899501593E9ECB0D6090CDAC29A6
SHA-512:	5C9174103871D7C0AF82050EB056CE6002F6867BA9C97B0A833285CC9F28326AE4534F8F93A5231F185BEA8941944002415AE3B63B79DE4A973D9E02715EB569
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eSZM.woff2
Preview:	wOF2.............................................b..^..T.`..(.....m........r.....6.$..p. ..j..p..1[........=.2........`...).m...........t'.d.T....../I&2..\.."....8.m....2..tJ8)^...Iq..R.h,..i.er.W."!gC..2YL..S...................,..Y{..X.....]..9^vp]...T...}PKA...e.\u....A](...E.:.u._.xH?....F....7c"n........&E....:N.^.<`f/.[N}.B....T&..\.......L...?/.......j......lb..3<..}Hd..n.kW....U.....z.'8n.........P!s.j..{2..m....J..k...D..+;..~..F...d.......DK1u.....{+F.#..`.`...#K.d.Q...h........b.`..0.....R../......H..H:....nN..$..a..J...&...zi.l.mg_(.%hK.x..3@s.W.50.....5cl.a.5..4@.0.#...T.../?R?..}.2._...y.v..-..-l.XL...S....-lu.d(.90.......D....c#,.q...h...w..a.l9.-.o.v...> Q.A..Nq)}F.Vb..:.9....kY..V.....1Y.D.....K...9\2...d...J*.........C.....A....U#.....x.(CP..p.h$.....>....w..5...5.YJ+w.pt#q..b...b;{...tj'T.r.?..k.P.T.s._.."...h..N..fw...{..w...&..... .....+y.H...`9Y0...m.....!....jtT..3..?...2._.d....8%.E:.<{..@...............53..A.a.a..w..n..@

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32644, version 1.0
Category:	downloaded
Size (bytes):	32644
Entropy (8bit):	7.994593554315655
Encrypted:	true
SSDEEP:	768:1s+Ex45ogHxE6B82ParxH53mhMSvQCwpJXX+13nzkovdU4Cb7:OVZgHx3B8EixH53g7NOHynzlvkb7
MD5:	3F02E1AEEA84F97C26CE78E796009467
SHA1:	3A86908B3E689621F23A326A8F3FD4B794599C00
SHA-256:	68425336934A956337B4593A3D47D51D2970D03AC4A9C9FC795596F13EB21775
SHA-512:	6574651139BF6A97CBBA6E020D6208CDEA122BB2BC1F88DFC4EF7CCA877CED229E5B5C6D2D7C2E2EC60C4AB56D8EB006AEE2E335258F04721C6E8A71DFF0EC78
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZogUQ.woff2
Preview:	wOF2..............S,... ..........................>...l..6.`?STAT..X........a..H..6.$.... ..,../..[.+...r......!.na=3..;.......`.a.2..m..t..uM)n.......d.v.z...E5.......N.s...Xji...0'l.pG......ll.#.8......j.....UR....>...:(.H.!..U3..i....D..Ct.-.y~..w.\.).........?'..=)...<)....v\|..b9.A.5.T....>...&].a..iFj.....u...\|O<$g.#.$.xQ..frE.i>qS..&..U.F3.@.7....k...z.=.WB...r}...Of._..u..;...I.',..(Z>47...Mq....eP".Xq.#\|.._\|..t..H!...3.5..Q........m.x.`c.+7Vo...#.+........./.G.H...Fi........7...~..Q d.LT+.o..%1..,..~....;..Q.(...K..D)..........h.Mb.I.4....S..\...L..._L.......?....a#$FI&"..,.P-.S7Ec0%..........}..I...".j.D.... ..r.n.G....8#..XTG.....g....Tw.k.U.....F...<.......{B..J'..QV\.-..."G0....O5..... .Zf=..........O.Z........_....G)......p./.m{.B..di.C/N.....hJ.^.....&..`:..T}^.D?..eN..^..nG..x..[G..&W..v'........K.D[Is&..p.@.h.T.......H.$.q...B........l.f3#4..QhQ..p......&.F...P..J...Cl....m.0u.a.a.......o.*...E.91)...a..i..M..K.\|(...:......?..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	776570
Entropy (8bit):	5.791268977484008
Encrypted:	false
SSDEEP:	6144:AJKJhyFkCi3/w1l0OjF65Qx6vTOD1GfLN:AJKJhbVjcMLN
MD5:	EBDE5FCEF703479113CA25ED26180BCC
SHA1:	B9711C22BF384EDC945BEECB6E1C24291139E0D8
SHA-256:	486B643AB9853B2217275410F12DB4DBC0AA6C947526C69DA2F8F07BC8BEF41F
SHA-512:	0EA17539AA05BFFC58DBA8CD50D472CC66692F603C9FA77F01196C93FBE08D2BD92811C0D145BDDC3F50AF1DAD92223D5DA6E5BADBCCC0491EADF0655CF80FCE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlE-jfTHt2L2aZcJIK_JSjZkT1Ro5w/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1988, 0x401ae1, 0x34f0ff1, 0x12280de8, 0xe420, 0x0, 0x18000000, 0x3, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,jb,qaa,xaa,Bb,Jaa,Laa,Oaa,Mb,Paa,Rb,Wb,Xb,Qaa,Raa,Yb,Saa,Taa,Uaa,bc,Zaa,aba,ic,kc,lc,eba,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Bba,Eba,Gba,Hba,Dba,Jba,Lc,Lba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,$ba,cca,dca,eca,fca,gca,jca,lca,kca,nca,Ad,zd,pca,oca,sca,r

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1510
Entropy (8bit):	4.0355432662902455
Encrypted:	false
SSDEEP:	24:t4qU/S93QRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Km2zQ:A/S9rU5I1YdtmMqPLmum1YUUZ/jTq9J
MD5:	CECA603BD198568DAB00E6DFC3120706
SHA1:	871C637521103DCE8F6DF9AAC0D1B62900D511B8
SHA-256:	F4AF84EFE90891185D9B29A841181CA9D26D7560864EA47B6CD709D3B964AEE3
SHA-512:	D3F4A52AEADEA52FDAC82C8B9A7427897359B43C3FBCF3E79AACBF30571B3482C991C5346069CC5DDD474C3814CF6507065C4914369C1236FDE641A934A08706
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5zM38 6.19c-3.21 0

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	3506
Entropy (8bit):	5.3456933665442286
Encrypted:	false
SSDEEP:	48:osINNCV0jM8/cV9JTpG0bZ8W9JXGUXGWXCedp0gO59Yys5vO7aoYre01MFfAuBIW:ods0v/cV9J9b6oFtWTYyrm0DQQOw
MD5:	0E329D4284B6F53FC3193CC0F8E58A79
SHA1:	FAE7E49ACC28C7E33E5853B33362DB0422FA0F80
SHA-256:	00648ECAE3B319FC118B623D7B644AF8FAEBA0815EADAA593D524AC311F425AB
SHA-512:	5A7E11BB41F350EB107D2908856F6652C5549F020B066A5BC9B6D8CF211EB88EF50F20E3BFE0318B92F3E2C6321FE5A2707277C0101327D5B32335A8F0718398
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Jg(_.ara);._.k("sOXFj");.var dv=function(a){_.W.call(this,a.Ha)};_.K(dv,_.W);dv.Ca=_.W.Ca;dv.prototype.aa=function(a){return a()};_.Yu(_.$qa,dv);._.l();._.k("oGtAuc");._.sza=new _.wf(_.ara);._.l();._.k("q0xTif");.var pAa=function(a){var b=function(d){_.Uo(d)&&(_.Uo(d).Mc=null,_.tv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Fv=function(a,b){a&&_.yf.hc().register(a,b)};_.Gv=function(a){_.sv.call(this,a.Ha);var b=this,c=a.context.iga;this.ka=c.zr;this.hd=this.Pa=this.hb=this.Ba=null;this.Ma=a.Ea.Kc;this.Va=a.Ea.roa;a=this.ka.ka.then(function(d){b.Ba=d;d=b.ka.id.w6(d,b.ka.getParams());b.hb=d.variant});c=c.o1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);_.Wt(this,_.Ni([a,c]))};_.K(_.Gv,_.sv);_.Gv.Ca=function(){return{context:{iga:"FVxLkf"},Ea:{Kc:_.bv,component:_.yv,roa:_.sza}}};_.Gv.prototype.aa=function(

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 116852, version 1.0
Category:	downloaded
Size (bytes):	116852
Entropy (8bit):	7.997713935602442
Encrypted:	true
SSDEEP:	3072:bDllz3cdHVFRX/KmeqWq6kqLw37wjIX4yUyga1SX:XllIJnNrb6kqLEFIRiK
MD5:	9FC7A466292A81DBCEB5B9F194B87757
SHA1:	B9994940CAE8121BB4ACC923972EA0B0B6BF177F
SHA-256:	8BA9D0704A43A49CD21D4917C76A1828BF6D60EAB09612A2049199652465BBFA
SHA-512:	5A721B05C621E2A10642A275372B21A4A2813F37FBC24B8CFAA2EE2D8F95D06737DD17E921D4BD90C50A17BC9325B14B4ECED296BA9BDF92DF8B5389D9268C19
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7e8QI9_.woff2
Preview:	wOF2.......t..........................................h....`?STATD......... .....P..6.$..L. ..L...n..[M...1.....8DE..Z-...fH}.g..9."G..f...W9..C..'O....yfU%. M............X.<..I..s6=.J/.....Q@..C.].b."r.eU7=..L?...L....(m..-4.uq8.t...JT...h.H.s{P;.&.7.J..L3....p..-.JM.G....[......&"".U@?`6;.y..I...f=..y.Z.S.........G.._.....m.h....c.....A. .Ul:rv".."...+[.^.&....B..-jz*..u.C.,..e....'?..(.zu..J..!..f."..H...1m.m]....b.xX..w...D]..m ....Ob.b.2......`...!ix]DmV.$.QJb[..C\|j..S....h....9:..Bs...bD..<V....rO.#3......P....I.S...F..=..<[.......lL.."...`.vH.h...5...4..7..b.{~.......Y..h....kv..}.......t.H..R}Im...8{..@..J.2..{.Y,.9.....&x..4..5...../.7.-_do.9{.=..._...m..c..}E.(5)...vdM.o.4;...........\|6yzo).igF.+..V)(..TV.<.M._sb.s.d>d..)..~.t..,...n.g.y.\\.....).4Ml._P.s.J..k:.5..+.A.v.....5 .9.UD.D...Kt.mG\............ppg.$.6...'RYJ......3D........E..1-...(....%$@...L.T...i)P.B.h).RJ......P....t...+R...P.....$...i......J.....v..X....,?......[..!keF

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	3.718562939644917
Encrypted:	false
SSDEEP:	3:PSnuZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZYn:qnuZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZoSA
MD5:	04D8FAEE2C402FF81E9ECEEF283D3DA5
SHA1:	A50D4C96A916CDB695299698493CB1B89288BC00
SHA-256:	63648C6AD8D9E6426C5810FFC89AE04C6CA27D981A2C0F902F1291716EB28379
SHA-512:	E29FE7B752CD2D89E6F6F6391E3B05DFE9F0DDA61D84D20BC0A4EB820B5C3F9DE8F33D77F0F3CC6880526F30F816BEBE8D3ADE3A121AFF405F09BD1921C9642D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQnyIqdVF7_aFRIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	CkgKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 126660, version 1.0
Category:	downloaded
Size (bytes):	126660
Entropy (8bit):	7.997861876113917
Encrypted:	true
SSDEEP:	3072:nIMBZfE3pqhzhi59cQ34yg5HU38AkEUkautnlCtzfrgV+U0WH:lBRPA59X4yj5kEVautn4i0TWH
MD5:	E171410D243718D27D3C6BD5306ACA68
SHA1:	6BCDBCD43497AE839A84A26FB83D68BB07A4D5EE
SHA-256:	62205E2E2B22EFD49A3A0D1C10C5F59AFA8F4C59B087825FB904263E73489DDC
SHA-512:	B2167AE822A4CF64460FC88430B1CEB7B905EE35F88F16EF817BAE2FE924053875AB73E6BB170B3808C16D74D6B62E86261FFF0931C75AB0FEF5CE4217094908
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RUBg.woff2
Preview:	wOF2...................]..........................>...<..P.`?STATH...B.....P........6.$.... ..h...J..[}......xw...pE.......!.n.y.A..._......8\|k...7.Au...HD...&W...O1...............o9.6y3....!... .p.?...j[+.0WQb..B.b?.A.....Q.n.....X(.L.0..n..=bf?........\|...'....i'eT)U.\.2J.(.J..-U.Wv5.^..{n...........:,.E.a..Ix...o.t.....h..L...:........Z...+....D1...Q.1..Q..c..x..)..&z....b....cQ./S...6......?.9.d..0......@j...0.....L?.;.g.zQ.R....">..U.U..d).,.ZG9.1...b.U....Mn.=....q.......].+tqt.4..g5...$....(<.I&.4.kD.XV.\X>'me&&.W....".....BR...Tvws.z4y.m..{.&.6..=d.`/st.`..<..)I,x...X.G.F.....\.......==.].[.x..e.x...w..<~.X...i()MG._.)a..$$!.H......z.R.....z0.$$..f..w.....e...HB....?..gY..(.....W..gy[@f..O5.......0;......E.>.. .3!x4l...A...%.._/.h.c.w.e.(;d.H\|1S/YL....}..M...0j.Y.~.......#..k..oBD5."...%..fXZB...............^....)..D....n..f.f.m.U..c...~..E\|...d<H..%.....6."%i..b..5....?s(o.kM..~......_.....<d......i..~M.\....~w.....L..Q5..5]3

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15447
Entropy (8bit):	1.7278338539839808
Encrypted:	false
SSDEEP:	48:b/68u+k29W8sEvlxN+Y9Ml6BCj1L81/L8C+sc5IY7J9FPm:bSGkEWRQxNXesc5lFe
MD5:	8DF19EC399BE913884590015105AA584
SHA1:	5502576575AFF37A626934FA655C124291C58AD6
SHA-256:	D48A0F5A08249E1768C06ACA31C16D50D1216434E1C91BA322CF5521577A59E3
SHA-512:	89D09ED10A4E440A423443586F111E247C3BFB1BE58AEFC3E62586354EF21F0CCF66619F54F6BC06CD81DD81C57B60DFB3D052C37AE8DC0E972963B67B3380C0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png
Preview:	.PNG........IHDR................a....pHYs...............;.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-08-12T10:01:56-04:00</xmp:CreateDate>. <xmp:ModifyDate>2015-08-18T09:59:41-04:00</xmp:ModifyDate>. <xmp

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 63468, version 1.0
Category:	downloaded
Size (bytes):	63468
Entropy (8bit):	7.997125921810043
Encrypted:	true
SSDEEP:	1536:7VHV0J5uO4aGGdel+rMeg+uHjOkD9azI7tUuE+g:7ZyWaGMel+rMFdDOkD9ppxg
MD5:	340CBE64973D5E2577A9809034AF4C50
SHA1:	519CE8EAF950918B4ABCA85995378BF3A862905B
SHA-256:	C0194A8F127D184BE90A347BB1A1C3A6F3BB5A5B3F39A88DD7CE115ECA8580C8
SHA-512:	16BFB371FDB13BD926663C0429FD6D43EEFEBEAD1F74E2BE8A179EF359BA4BF9946A584919674311B182ADE095FEDE4BB024E5AFF94287153124532682F640B0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w7.woff2
Preview:	wOF2...............<.............................."...j..8.`?STATD..l.\|........L..w..z..6.$..p. ..B.....([....i2..hv+...v..}......n......5..CY....n...Tzn[.,W.........I&2f....m....:tln..5.&.wc.H..."9K..#.J5.C.>....~.T..'I.....6\..xI.X..8...\.>.E%;<:G.%.. {..r....c.d.}....T..Yc.........&..(\T..r.B..3...7..."..fo.TI.lm.A..&....T.TZ.Ud.}...l..Y.=.....E5S56...._....}i~d{o.k.......?@.Ha]..z...K..h...W0.T\|r....L.F..o..!^.....&o-l..-.[X.."..q..8L....iW...].0..L...NRd..WN.?..,.'..F..ibo..J..c...q...........}:...XP.@%..x...NX.;R4..."......O:Uro.. +..)..=P..(..0k)..W\..}.BE...GFu.......@...s.s.E=.1..Qi..6 ...Fab.o...X.1................q.....:c..Y+.2.8..N"...gUB..]!........=..l..y..2.,a\|..Pjg.f.h......E..[..............D.q..k..E......?....\....t........u....pYK....ycRa.t].j%.Y'Z.x.C...v.wM.&.7w.V@j..O.P.$S.+0......-Qhk._.R.J4..."\QA.Ts......o....X...-...$K.w........x.(....i..a:..!...uJEyEW..<...e@.Nq.@T.T.n...]....zt@...`..M2....V....s..

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3640, version 1.0
Category:	downloaded
Size (bytes):	3640
Entropy (8bit):	7.935496811135212
Encrypted:	false
SSDEEP:	96:VyjYr2gmTOswu8lSMMVAHI/qn8A8E1/fz6S8Y:I2zSOswu8AzG821rT
MD5:	421B045B5EB019D56F6407AE63E57A92
SHA1:	F0D0D18A1887D371B18C1B06B99AD2D3C0923E8D
SHA-256:	5DCEBB5EC80A2DDAB469A77F1A37412C34205EF76D054131083B0BF663B786FB
SHA-512:	A426E4F8C2F2397038F4A1F60ADB091BA097DABE9C4ABF8967F80B20C98F1A7569DE9CCEED89716329FBBAEF0DD0AFB4B5EFF0E6C96DB152ACC86F1CF799C2C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eiZM.woff2
Preview:	wOF2.......8..........................................T.`.\|.....m....0.{. ..6.$.<. ..r.W..1...#..4...lc.K.e+c.@3.gq.:#..n....CYG..Q...W.sN...If..w.?7A....5..Rh......D......c.Iv...w........T..dMy.?...x$.H-.5.....GQ@.....G]..,..\|H!T...x+mK.M-....X.u0n...O..5..mS..+J.\|..CS......E...#........,.%l\...v....?.}...=.Fu..)eo./w3...8..i.lf..!y"U...3:.8..vy........(..(..c...!....4....1.....0..`.....Q..4\| Z...j...B....h.h.v.K.(4.d..o..J%`(....zP...0#...y..#..B....#..L.......C..#..P.>+.....@.X....m....F.........AO..t./..X......(.....tq.i....P.....o.M..).m.......bX..n.1...n...-.;........1kR....p..w]0.x.fYz......[W.^.Z......#.K........... ..:...x..O.Q.8[.PK.(.w>'o........^..KV.H.+F.1.qh%Whx....Z.).3.4{..;.K..w0....N .Dn.Sj.l>..\|Y.....&.U..4.^../<.@3.....VBhD...P.8...&.........7.e../.....G...}x.Ne...,.,.n.....T..4.6`....i.M..+.YC-..]@.4.6..qi$%.Y2,.L.=...6...u.10.g.2%9..;..fC.j..P.2QHv..T4......X"lz'..n..N...5...\|...4.)\|...($..Y..9.3...F.t....rN..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26992, version 1.0
Category:	downloaded
Size (bytes):	26992
Entropy (8bit):	7.992281768071691
Encrypted:	true
SSDEEP:	384:0qMvx5Q6PuscBhhGTTMJzBASBFa99ITYpp1b2Q17kUwBkEV50x9Xg96Dsvv9wO:0qMvx5Q6Gsah2T2BAuTYwBppri9XhS3
MD5:	92BAE553B71BC6DEDFB17E73BA5029EB
SHA1:	4B581AF52A479729888031EB60722A306A68DA55
SHA-256:	49BE4E1A8B5E250DE2A7A738CAC6C157E4148414CAEAB4055D92DA8152D95619
SHA-512:	8895176C2915FF0AF40D923256CE4371B639B24945D9E4183B8146EAFFF8DCA58E87E3CCFFEED8B2CAC88A7BB2906875C4E3CF1DA6B39F4563821A8AC287E130
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WC9wR_LU.woff2
Preview:	wOF2......ip.......8..i...............................D....`?STAT........<..A.....6.$.... ..h..x...!...s.!............gK....r..u&5{.H.IgT:....?5..qi.i.c.m.^!.L..dZ ..=.%2......m.....\Fr...=.,a%..D%..1...r.".o-s..N%.9.u8.s.1&[k..B..m6D:.t..M.z.;..F@.A.RIT.I.y.Q....N.. kG..dD^x.....bs.JLb..2.St..f....\|.Y}.M\|.y>!.p.\|../sT?T.c'~.......g<...D.H..Q..'}...........3.+.....fN].D...."0n....?....$..)@JR.\ ...n..WX;m....d9.R.?.....B.....R..\_...~.m..V._.ml.9pL..Jj..(9.Mi....rL.`m.`.S.\|..g....?..O>...)...hc.f%.m.6.7..Z..c.T.....%...n.Z"..i..G...\|.=.A1:..9.......r....+=1...........T.5.....5....B......F.,Z....)..E7..q).!...:.0/.V.9O./......}z1)`8..T....,.......I.@..?.FT@q.M...{S.A.c....sI........ .K..5.mP....Wg.s.'....IuaD..........~.+......`.-.[.....(g#.........,..[..\|r.u...3+..J~......p.=...1.)o..W.J..45.f.8..A. .Qg..H.N..O..yc....."k....w....2\.Z...q...a.7....C6.C.....fg..3;... O...........9.gp.F...o...I.O.W.Y.....<P.R$..{.d.6UY..R4.{V.......!?.x.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4344, version 1.0
Category:	downloaded
Size (bytes):	4344
Entropy (8bit):	7.937797980739236
Encrypted:	false
SSDEEP:	96:JLTn03nQsDwAbFI1XLKrlgbbNaF8l5efEY5TMDg+P/6sJA6L1:JLTHKwAmxLUlQbNQW5edWg+Xtaq1
MD5:	E5A3502E3717398EE835D98F84874738
SHA1:	75C4C2D0F1A2EDA7E16A16293BA840E19991EF1A
SHA-256:	E5ACBE17FD4E63CCA2CE1B72E482FC2411D27D9D534476AD7F0108B9DF087FCE
SHA-512:	609920E215906893F52928F75E2A7B4704F5FCD4D5D8F2258A9D410EFD06270DEBA734F41F6BBAB7C5FEF693C40A2CF3A84B57250F360484D2789C928ED202EF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9zoSmMw.woff2
Preview:	wOF2..............".................................p.`.l..F..m....8.L.(..6.$.L. ..<.}..<.. E.b.8...5..F.Am.......z=...$q..".........].)..~....3'z...0.v..r.....2....L.!..O..?w........X.Dd..X.e.....U>}?:.....c.}..m-..........@......]A.K#=,..M.+....k.gE..... .e..}s.4Y+j..........]!yHI."..6....../[....l..X.....M...zD.tQ=@.'.....4..E..jk& .".. ..{...lA.<.-.@.>.nB...J;9$U.}U..m...p.?.^.$.9...d.........;W@ajktUe....P......B1..o.....M D..Hb...i.:B..2..).U.:....U....yx.z[.....:...M.......r.....3Q.....835..Z.`.........J..........v.......v..a($X..B..OCdd..hLxQd"I4.MS......1.4....u..@..Q.(...ia....x..'...y%~=..@....l(h.P...H0.....t..H.5a.hXtH.~...;?Y.>.;....q...F<.7.{.i..>.sH....[y.Y.p..W...X.6.%...(F$.M..N.Gw..:..b..0."..`.........R./.....LS..kA.h.A..%. .R...2.^_0.cW Z..C..,4..`..=.X....j.j2J...g..PtT....<y..,.\._...s...{.R...:..".. .@...)....+.3.)...,..g9Bj.Q...O.A....y&.:....eo......Z.2......8\..>?U.O+p..\|./...ra.qHG&...FA}....($.k.:.z.(.....tT@.g

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99952, version 1.0
Category:	downloaded
Size (bytes):	99952
Entropy (8bit):	7.997773585050746
Encrypted:	true
SSDEEP:	3072:jm9YIoqKNZx+lkLqhB3jeRC2X9SPxK72Hu:jm9YfM/hMZSi2Hu
MD5:	4DC58D8C42A13CD77CF2CD978F639388
SHA1:	221EDE548E9E9CF711595D6511C73CD8EA4EB595
SHA-256:	B93F4669CC09016E4D1AD1836A4CD1EBCF832C22979E5FA11DB4F7C3620223AE
SHA-512:	52D3C3AD61265E984ACE82FF6F1AD5B663E76955309866EF7B7D9EA985AD2917FB06FA8BDD96B61208035FD1E2F7DD26A9BE91322A196A0B628C22BC50242613
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9_oA.woff2
Preview:	wOF2.......p.......,.................................L..P.`.....F..m.....8..0..\..6.$..X. ..<..c..<[#q.....U..t..._MK?...G.u......9.PU.FG.c{y....9..\|............@&..0J\|.Uh.R......7De.A...$3...5..v).(..e..J.TP.B.Q.....1.e#..D.mw.'.W.@..a.a..:.R^c......tv...............pc..c..Q..I.......O>KV..A6..C.B...:..e..5.9XVC..!Y[..B....?.3<.s.v@&..E'a.G....}?I.(k4{W>e.......W1.(...W....w../?.<.%.9.]._.[..v~..j....xm....Zj...S.J.I..9..W3.u.VC.. . ...:;@..<."9v~CTC...Sj.V...q.~.'"....9......F. ..+...E.Q.R3.=13..Q...2.eHR8...a.8>Q.....=....mD1.")..!..m.....J.:..c...^...z.....zQ.V.S6s...A.c..x..I.'...4:/I........G..c.t"Z1.y..M..;.p..y...2..~. .P~`;.6.g.)m..pLRUA..-.}.hg..Z.i.\.iw...v7..f.......X1.....su....=0...8..].&...Xl...e(.T`....+.'.4.y........f.mN...vVtT..B..........7.sSRr.Y.c0:.C1...,.o..{.F.....z..w.6............1,sgD$.d`.S(.b..a^....HyJ".Z.2....'.w..M/..I~......n.w..D..L..b......_.r++......r.z=..Q~p-;@..i.....T.)ju....?...z.H.P.p.rC.q..t......j..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	776570
Entropy (8bit):	5.791268977484008
Encrypted:	false
SSDEEP:	6144:AJKJhyFkCi3/w1l0OjF65Qx6vTOD1GfLN:AJKJhbVjcMLN
MD5:	EBDE5FCEF703479113CA25ED26180BCC
SHA1:	B9711C22BF384EDC945BEECB6E1C24291139E0D8
SHA-256:	486B643AB9853B2217275410F12DB4DBC0AA6C947526C69DA2F8F07BC8BEF41F
SHA-512:	0EA17539AA05BFFC58DBA8CD50D472CC66692F603C9FA77F01196C93FBE08D2BD92811C0D145BDDC3F50AF1DAD92223D5DA6E5BADBCCC0491EADF0655CF80FCE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1988, 0x401ae1, 0x34f0ff1, 0x12280de8, 0xe420, 0x0, 0x18000000, 0x3, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,jb,qaa,xaa,Bb,Jaa,Laa,Oaa,Mb,Paa,Rb,Wb,Xb,Qaa,Raa,Yb,Saa,Taa,Uaa,bc,Zaa,aba,ic,kc,lc,eba,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Bba,Eba,Gba,Hba,Dba,Jba,Lc,Lba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,$ba,cca,dca,eca,fca,gca,jca,lca,kca,nca,Ad,zd,pca,oca,sca,r

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33997
Entropy (8bit):	5.391053423477483
Encrypted:	false
SSDEEP:	768:iKl30x8qOmQv4B9xUkk2ubp2uqBbgqiWoIarmFSeMdFF98OAprfqNfJ/L:dmQ2jk2ouByWoIarVJH9WuDL
MD5:	CC20E859C1AE5DE8C69EDE084B1D4B72
SHA1:	CFE87582083776F8634DDD0BDF281889DAA5D5FD
SHA-256:	5FB1B62C2F289A906E6D5A6A786D9F27762B4BF92261236C3528B904D490F598
SHA-512:	4215B64B48D35E1758AD651DCFE30AE81AC7FE919E9DD9F4CD0057F67869E0D108D9C55B68BD42CD0FB39A7060BE37FD331A0A20AD215535FEB1E40F3AF2E5F9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var iva=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.Zf("//www.google.com/images/cleardot.gif");_.Pm(c)}this.ka=c};_.h=iva.prototype;_.h.hd=null;_.h.E_=1E4;_.h.WB=!1;_.h.gS=0;_.h.qL=null;_.h.nW=null;_.h.setTimeout=function(a){this.E_=a};_.h.start=function(){if(this.WB)throw Error("rc");this.WB=!0;this.gS=0;jva(this)};_.h.stop=function(){kva(this);this.WB=!1};.var jva=function(a){a.gS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.ln((0,_.Hg)(a.MI,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Hg)(a.Hla,a),a.aa.onerror=(0,_.Hg)(a.Gla,a),a.aa.onabort=(0,_.Hg)(a.Fla,a),a.qL=_.ln(a.Ila,a.E_,a),a.aa.src=String(a.ka))};_.h=iva.prototype;_.h.Hla=function(){this.MI(!0)};_.h.Gla=function(){this.MI(!1)};_.h.Fla=function(){this.MI(!1)};_.h.Ila=function(){this.MI(!1)};._.h.MI=function(a){kva(this);a?(this.WB=!1,this.da.call(this.fa,!0)):this.gS<=0?jva(this):(this.WB=!1,

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.331974567903709
Encrypted:	false
SSDEEP:	96:oioVBmc/jp+A5vBwA+gxmhs8YrKLzzLmQErXVh1WsXXxxqjATD8U8w:iVB/tRSAFmhs8BBEjYsHxxqiIG
MD5:	F4ECF0D5B96ED265A1D4DF66F6D73CE7
SHA1:	4CEFF72898B6E7D038C96F77B21D35C4573A9F69
SHA-256:	DCD4DC6B18129C62014E76386CB5DE25E7B2E425F4D745DA5F6FE590DA3C5584
SHA-512:	76E2D8B9735EA8F252E0E817CD3E823C5DD34B6B83D678A2F42E1538BB698D7CEA604D8F272B326EB2028916ABB92488A0DC9A8EB1909C8AD11D1E5245C5D4AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.oOa=_.z("wg1P6b",[_.KB,_.Fo,_.Mo]);._.k("wg1P6b");.var v9a;v9a=_.Lh(["aria-"]);._.GJ=function(a){_.X.call(this,a.Ha);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Oc=a.Ea.Ff;this.hb=a.Ea.focus;this.Kc=a.Ea.Kc;this.fa=this.oj();a=-1*parseInt(_.yp(this.oj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.yp(this.oj().el(),"marginBottom")\|\|"0",10);this.Va={top:a,right:0,bottom:b,left:0};a=_.kf(this.getData("isMenuDynamic"),!1);b=_.kf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.ka=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Ta("U0exHf").children().Yc(0),_.Wt(this,.w9a(this,this.aa.el())));_.uG(this.Aa())&&(a=this.Aa().el(),b=this.Je.bind(this),a.__soy_skip_handler=b)};_.K(_.GJ,_.X);_.GJ.Ca=function(){return{Ea:{Ff:_.iG,focus:_.UF,Kc:_.bv}}};_.GJ.prototype.Yz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.cB)?(a=a.data.cB,this.Da=a==="MOUS

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50264, version 1.0
Category:	downloaded
Size (bytes):	50264
Entropy (8bit):	7.996208458310892
Encrypted:	true
SSDEEP:	768:in/nRPDOHUY6sQaVZNT6ujDwWhOte5ocSYHh0SfncpKN8Mid5BRen7rQy:i/dy0zsQaVf5DwcGx5YB0KOMWRe7r
MD5:	AB5E010EBED9BCFB98CDB5BD47D3E430
SHA1:	5D1AA4B896BF05AFE8978F74E2E88A53B0D9BB6E
SHA-256:	B5477EC958C9F1F06AF0D54F50633B66C76C5E010450283C5620CFC79E57E963
SHA-512:	EEF8BCC39498E40562E6E919969492E20093AC577821C34E85D78387F7B0ECDFA90CF14FFD2A8F64FEB608BA0253397F674E10CDE82FE2CC5E80BBA7CF25BB4C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-C0Ckq0.woff2
Preview:	wOF2.......X...................................... ...0....`?STAT@........X..#..h..6.$..L. ..v.....[....1v.n.,...u.0..-........a3......7.B.....].............-Y.._.>....""].t.kuc.C..nR.U.......9%#D..G..%.d...f...U..f.C=.l.5B...1ALPh2.2...D%#i..A..o.v..d....w.f.6K.tf. U...."r...d#.UD.....5Y.....;.D~9.up.......i.[.O.).t...0..7..w..%..T......;.9CB....>..\|JF.....~..G..~..........+}...]W..s..h..._.%;/TK....b~x.....l.l.YH.[.AL..h8AL\Ry.t.Z...c..-aBf..,...Y...K@.7..R...Gi..O.........ok.16..(q.......\|,"m..........0.)........Q..V.o........<..r..SK........B(bR(.GJ.....uJ%......._u.7....X`..#.s..Y..k..;.$A.i.r.%...d,.\|...}..D2j!h..I..&...c...Y.d.z..."....x)e$...u...@&...:..g.a<.z..'y....l..qRv......(...[N.0..g.. ..f..O...J..s},.s^U.-.3,.2.yO{.l....[J....G.n...LR....@....$}......f.GF.}/..^..p)/....?$...1.?6....!&...;~@..r'Y...d.r.A.B..f...K...../diJ_.aw.%.......&....a0.f..m..P#.2%....c.."....{.._e...mT....!0.c....b....>...)`.[.C.a.m4.x8...7..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	3506
Entropy (8bit):	5.3456933665442286
Encrypted:	false
SSDEEP:	48:osINNCV0jM8/cV9JTpG0bZ8W9JXGUXGWXCedp0gO59Yys5vO7aoYre01MFfAuBIW:ods0v/cV9J9b6oFtWTYyrm0DQQOw
MD5:	0E329D4284B6F53FC3193CC0F8E58A79
SHA1:	FAE7E49ACC28C7E33E5853B33362DB0422FA0F80
SHA-256:	00648ECAE3B319FC118B623D7B644AF8FAEBA0815EADAA593D524AC311F425AB
SHA-512:	5A7E11BB41F350EB107D2908856F6652C5549F020B066A5BC9B6D8CF211EB88EF50F20E3BFE0318B92F3E2C6321FE5A2707277C0101327D5B32335A8F0718398
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Jg(_.ara);._.k("sOXFj");.var dv=function(a){_.W.call(this,a.Ha)};_.K(dv,_.W);dv.Ca=_.W.Ca;dv.prototype.aa=function(a){return a()};_.Yu(_.$qa,dv);._.l();._.k("oGtAuc");._.sza=new _.wf(_.ara);._.l();._.k("q0xTif");.var pAa=function(a){var b=function(d){_.Uo(d)&&(_.Uo(d).Mc=null,_.tv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Fv=function(a,b){a&&_.yf.hc().register(a,b)};_.Gv=function(a){_.sv.call(this,a.Ha);var b=this,c=a.context.iga;this.ka=c.zr;this.hd=this.Pa=this.hb=this.Ba=null;this.Ma=a.Ea.Kc;this.Va=a.Ea.roa;a=this.ka.ka.then(function(d){b.Ba=d;d=b.ka.id.w6(d,b.ka.getParams());b.hb=d.variant});c=c.o1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);_.Wt(this,_.Ni([a,c]))};_.K(_.Gv,_.sv);_.Gv.Ca=function(){return{context:{iga:"FVxLkf"},Ea:{Kc:_.bv,component:_.yv,roa:_.sza}}};_.Gv.prototype.aa=function(

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.331974567903709
Encrypted:	false
SSDEEP:	96:oioVBmc/jp+A5vBwA+gxmhs8YrKLzzLmQErXVh1WsXXxxqjATD8U8w:iVB/tRSAFmhs8BBEjYsHxxqiIG
MD5:	F4ECF0D5B96ED265A1D4DF66F6D73CE7
SHA1:	4CEFF72898B6E7D038C96F77B21D35C4573A9F69
SHA-256:	DCD4DC6B18129C62014E76386CB5DE25E7B2E425F4D745DA5F6FE590DA3C5584
SHA-512:	76E2D8B9735EA8F252E0E817CD3E823C5DD34B6B83D678A2F42E1538BB698D7CEA604D8F272B326EB2028916ABB92488A0DC9A8EB1909C8AD11D1E5245C5D4AE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.oOa=_.z("wg1P6b",[_.KB,_.Fo,_.Mo]);._.k("wg1P6b");.var v9a;v9a=_.Lh(["aria-"]);._.GJ=function(a){_.X.call(this,a.Ha);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Oc=a.Ea.Ff;this.hb=a.Ea.focus;this.Kc=a.Ea.Kc;this.fa=this.oj();a=-1*parseInt(_.yp(this.oj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.yp(this.oj().el(),"marginBottom")\|\|"0",10);this.Va={top:a,right:0,bottom:b,left:0};a=_.kf(this.getData("isMenuDynamic"),!1);b=_.kf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.ka=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Ta("U0exHf").children().Yc(0),_.Wt(this,.w9a(this,this.aa.el())));_.uG(this.Aa())&&(a=this.Aa().el(),b=this.Je.bind(this),a.__soy_skip_handler=b)};_.K(_.GJ,_.X);_.GJ.Ca=function(){return{Ea:{Ff:_.iG,focus:_.UF,Kc:_.bv}}};_.GJ.prototype.Yz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.cB)?(a=a.data.cB,this.Da=a==="MOUS

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64656, version 1.0
Category:	downloaded
Size (bytes):	64656
Entropy (8bit):	7.996287850457842
Encrypted:	true
SSDEEP:	1536:22fMmkOQ8l40fU4rMYDtbM/lv4ri2YdBRlJeZWmSbATNfL0lg3y:22Gof4YDBM/lzh1lsbScxfLkgC
MD5:	28E2B282CBDDE4FBEF925AA25DF6FEA3
SHA1:	764C6B373670D221C28CD5DA0584FCEB1C444905
SHA-256:	B1DE6EAC3059CA778E6D2367182C7F11EDC81E09971E56F788DB308A674EA7EC
SHA-512:	54D8A320ADDC0205D3A57D768B80A06B7AD09D47E79DD4248B068E20D0A65F00C5E96871FB6AC09B9CE2B8D8AA77656384FB11F58902A42D55A0DA804F0CE6DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZ3zwprpvBS1izr_vOMscG6fA.woff2
Preview:	wOF2..............60.............................8.......`..d....m.....\..1.....6.$..X. ..`.....<[W.q.....D.nC -.u.Z..07.A._.N^.....q..nU.$`$......'.1.n..@E.J........0............^.`...d..+.f....;[.;..'2.[3z<...\|....^i.=...X[..6Q.m.L..7zO....XH>....i..m8........x.B.B.(.?.#x'/v...>.l..J...J.a..i..'....#.$.{.tIV.[w..q.&..37{.I.#L&....\..9....H....f.3F.zq2M+F..5..............yPI'...].%..'^.....N.7q.L...!....6`DM.1.KbLF.Pj....'(b.R...Q....b`....-.=....<..{_.......@0(!..EJ"B.`+A..5(.......8.=....r\...\..Xy..b..5.....z'...^.8..l..Ny.....3.....H.0...]~.!...@F..N.B.+Y.zP\|..gg..,.(.^.....x...Z5g.T"7x.:.a..BU.....2=.....S#L..mYQi.k./.77>m....F...].J..o.Q.F..!.1...3f.1c..3~C.1cF.1c..3cF..v.. .$..........KrI.._.K...JO!.z.RD......."...!B......... X..u.p.$...-.........L:L.i.-K!~...\|)..2v/......!.i...".mFR...?.YJM..l....Y.6..G...........2q.t..!dh..Uk`.0t....#.j..O......!&.Ql..9J....y...[qQm..V;_.j..8.a....m;...i..L.c7.`......?...^d..i.1.!..8...#.....

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33997
Entropy (8bit):	5.391053423477483
Encrypted:	false
SSDEEP:	768:iKl30x8qOmQv4B9xUkk2ubp2uqBbgqiWoIarmFSeMdFF98OAprfqNfJ/L:dmQ2jk2ouByWoIarVJH9WuDL
MD5:	CC20E859C1AE5DE8C69EDE084B1D4B72
SHA1:	CFE87582083776F8634DDD0BDF281889DAA5D5FD
SHA-256:	5FB1B62C2F289A906E6D5A6A786D9F27762B4BF92261236C3528B904D490F598
SHA-512:	4215B64B48D35E1758AD651DCFE30AE81AC7FE919E9DD9F4CD0057F67869E0D108D9C55B68BD42CD0FB39A7060BE37FD331A0A20AD215535FEB1E40F3AF2E5F9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var iva=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.Zf("//www.google.com/images/cleardot.gif");_.Pm(c)}this.ka=c};_.h=iva.prototype;_.h.hd=null;_.h.E_=1E4;_.h.WB=!1;_.h.gS=0;_.h.qL=null;_.h.nW=null;_.h.setTimeout=function(a){this.E_=a};_.h.start=function(){if(this.WB)throw Error("rc");this.WB=!0;this.gS=0;jva(this)};_.h.stop=function(){kva(this);this.WB=!1};.var jva=function(a){a.gS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.ln((0,_.Hg)(a.MI,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Hg)(a.Hla,a),a.aa.onerror=(0,_.Hg)(a.Gla,a),a.aa.onabort=(0,_.Hg)(a.Fla,a),a.qL=_.ln(a.Ila,a.E_,a),a.aa.src=String(a.ka))};_.h=iva.prototype;_.h.Hla=function(){this.MI(!0)};_.h.Gla=function(){this.MI(!1)};_.h.Fla=function(){this.MI(!1)};_.h.Ila=function(){this.MI(!1)};._.h.MI=function(a){kva(this);a?(this.WB=!1,this.da.call(this.fa,!0)):this.gS<=0?jva(this):(this.WB=!1,

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.530541089861216
Encrypted:	false
SSDEEP:	96:o6AXxwxcfkdicf6mtYtcFJqNzOWSZWf0Wwh1Xw:iXx6cSRteNNt0Q
MD5:	F0B57E0A717439E30C170736B8602DC2
SHA1:	EA973BF2E633AF78AEBE945DF4E910F7CB6B2E65
SHA-256:	3BA62BEF8A7AC67E60A104E1768DCFBD8539F5BEF82077FBCC8BC6E647242B7F
SHA-512:	7E257D2C94C0335D600D75D0733E7E4FE52F4D498CB16258E8FA03C3737130900FCCEBEE9095BE2899209D0486BCCFC7276158B999C216225E554E68DCA16346
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Xya=function(){var a=_.Ke();return _.uk(a,1)},Lu=function(a){this.Ga=_.u(a,0,Lu.messageId)};_.K(Lu,_.v);Lu.prototype.Ia=function(){return _.lk(this,1)};Lu.prototype.Ua=function(a){return _.Ek(this,1,a)};Lu.messageId="f.bo";var Mu=function(){_.hn.call(this)};_.K(Mu,_.hn);Mu.prototype.Cd=function(){this.cV=!1;Yya(this);_.hn.prototype.Cd.call(this)};Mu.prototype.aa=function(){Zya(this);if(this.uE)return $ya(this),!1;if(!this.lX)return Nu(this),!0;this.dispatchEvent("p");if(!this.iR)return Nu(this),!0;this.sO?(this.dispatchEvent("r"),Nu(this)):$ya(this);return!1};.var aza=function(a){var b=new _.Zf(a.x6);a.jS!=null&&_.bg(b,"authuser",a.jS);return b},$ya=function(a){a.uE=!0;var b=aza(a),c="rt=r&f_uid="+_.cl(a.iR);_.Vn(b,(0,_.Hg)(a.fa,a),"POST",c)};.Mu.prototype.fa=function(a){a=a.target;Zya(this);if(_.Yn(a)){this.VL=0;if(this.sO)this.uE=!1,this.dispatchEvent("r"

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1147872
Entropy (8bit):	5.595475167063091
Encrypted:	false
SSDEEP:	12288:jCx1nX2o6Kd2mNCz4+24chUrno4QaNwXj+C6enRjj+n8/jTez:jCx1njfjT6
MD5:	874F133B6B87EB914DBC7B578C1193ED
SHA1:	74B1F128572F92DA3E1534D8974972F66ACF3202
SHA-256:	637454435CB8CF024659765C5D175A6BF966A87AD5426F9B89F2D2BE579A8B87
SHA-512:	89BD52E21736A11F21050FCAC0E1D1C5BD937B8A87CDBC01312E67D14D845E3A5F4D823AA628269433BDB8827400BDB8754093A2F46C73765A20EAA1576758E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/freebird/_/ss/k=freebird.v.hYPByH7EbvU.L.W.O/am=MBg/d=1/rs=AMjVe6jfJMcYyQopdtGVbFiCadz8FyuKQg
Preview:	.tk3N6e-cXJiPb{-webkit-border-radius:2px;border-radius:2px;-webkit-box-shadow:0px 2px 4px rgba(0,0,0,.2);box-shadow:0px 2px 4px rgba(0,0,0,.2);-webkit-transition:all 0s linear 1s,opacity 1s;transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.tk3N6e-cXJiPb-Tswv1b{background-color:#f9edbe;border-color:#f0c36d;color:#333}.tk3N6e-cXJiPb-u0pjoe{background-color:#484848;border-color:#202020;color:#fff}.tk3N6e-cXJiPb-EfADOe{background-color:#d6e9f8;border-color:#4d90f0;color:#333}.tk3N6e-cXJiPb-GMvhG{background-color:#dd4b39;border-color:#602019;color:#fff}.tk3N6e-cXJiPb-TSZdd{-webkit-transition:opacity 0.218s;transition:opacity 0.218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.tk3N6e-cXJiPb-yolsp.tk3N6e-cXJiPb-TSZdd{padding:2px 16px}.HB1eCd-X3SwIb-haAclf{font-weight:500;height:0;position:absolute;text-align:center;top:32px;widt

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1528, version 1.0
Category:	downloaded
Size (bytes):	1528
Entropy (8bit):	7.7753709629209045
Encrypted:	false
SSDEEP:	24:5agnVyeL5S2yekPsk9PfKFG8XUxRD5HLRRD14X9Yumi5+MoVOwhdv2jN:5agh5fBkUc8yRDPtudw/94N
MD5:	EB7377208715318B001D920F049E318B
SHA1:	9E428185FC78B5F18B11D1B29353433939B08B5B
SHA-256:	10505DF86B3638BE7B5707A542C0C7C80ED856F14E037BB1C64BFAF712B0AB75
SHA-512:	B6C0273E30938C67D2CC260D04A7E356CA750F3FE332700FC739966041AFC010AB2E04739E6F627A88042EAD1A5B14F37C580EF6E00D6869DDDD2E303DD04D35
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTI3jw.woff2
Preview:	wOF2.............................................2..2.d.`?STATH.d....D.L. ..6.$.8. ....u.....QTr...<.m5k..)..-.....q.....?..sW..._..7......JE....FE22.....N}..f.......t.N.!.v,......8q.'......p$.`fJ.JA:S..F.............'}..,...u..A..H...h<0.....G8...9_3.....q.....b ...0FB$,..........W.1...J. ..D..C@H.....D1.a.xp..(...c.v..\|.A../O....K,O......L1z..&...H.1!aN...d..s.....:...f..S..P.A..I....%..)....6..r..].v`.....V......c...a.IuE......".H..i......B.#W.....s.R......m.?...H......$q`X....T.i)C..^w.>]. ..;..Dx.5.@.4.^.P....k..........g3..\|..3.eYb.2hd.2K.L......wg-....;s......Q.'..(5..L'...f.W...L....<..9k%.6.v.$......&.w....w4..k......6..Bj....R.B.r....d...I.5cb.8...{w'...6J..98.q-.HLa.".J?.-.>...3+......)..gtwvb.j.8u..vW."*U.:......y.......+:....D.7=l....9j.v...T8r. .........`...qp=.<Tr=...D......d....H.C.^,..%..S.:.=3.....s.9.$ .8~.Q....t>.6262..8..SP....s#.r.S>y..(M.......I(v..JUL.....$y9.EU...&z:..T....QD..Kn.....p.xI$,.,I.......n\|...N.+

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	downloaded
Size (bytes):	121329
Entropy (8bit):	5.473441016381779
Encrypted:	false
SSDEEP:	1536:OYIcfKtW2VBk7UhuCFpn7KWntTbxsH5Id3VwrbPC7hw5O+qNAyyLO5/+QV5bPccK:dIyKGGK4z80enC7hR5bPcH388
MD5:	F10030C11ADD315E043B65E41AA7254A
SHA1:	286D8F55E81CD13AC68B87E321B93A4DFB71EC44
SHA-256:	B0DF1F414593AECA0C09A22E6F6C0C5D0AC5280D16D064DD5FF46F0E0902B476
SHA-512:	97736AAED31E0DB649D5888AE3F189D4337685CB94BC2455C9E6C573EED7A97FF63018AB929C2622EC95AF73158B14FEE5E0253DE2F55363A0ECB0650B89CE93
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	downloaded
Size (bytes):	524019
Entropy (8bit):	5.741522639019624
Encrypted:	false
SSDEEP:	6144:XsqKPfwwUGby36EDFbeBcoD+hz7ompYAtTVe8Y9h62vkLCO1z8EDM+qYnFK0CSTE:FKtwwmvtTVF65smOnt2
MD5:	12DD093C2139B587557753F911FDD9C6
SHA1:	84574E075C0B1C61819B680FEE0CF245CCFAA1F6
SHA-256:	5619E6128C7785FF478F873F391ECA980D9CFC016DDE4C45260D7FE3FBD641C6
SHA-512:	5AFD25B30C19017ADF72AB34636B65E5C3610BAB6C3BE6BED09B5F758372CC188383B770DD41513D219891FC0CC42B3D6577FFB46DFF9F8046D8638A1A35D281
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.2m9rdWaS4Gs.O/am=MBg/d=0/rs=AMjVe6h3G7zmzsZZYBDDnQmsz-PK-2-isQ/m=bCfhJc,u9ZRK,pItcJd,yZuGp,eFy6Rc,sy3l,sy3m,sy30,nAFL3,sy2x,sy3k,sye6,sye7,sye9,gJzDyc,aW3pY,mvo1oc,sy8w,I6YDgd,sy4d,sy4c,sy4e,sy4f,sy4k,sy1j,sy48,sy4a,sy4g,sy4h,sy4i,sy4j,fgj8Rb,sy4b,N5Lqpc,IvDHfc,sy4z,sy4w,sy7u,sy9f,sy9w,sy87,sybb,sy8r,sy9,sy3z,sy9i,sy9p,syb8,syba,sybd,sybc,syb3,p2tbsc,nV4ih,sybf,LxALBf,sy20,sy23,sy3s,sy1y,sy2a,sy2p,i5H9N,sy5a,i5dxUd,syc8,sy2e,sy5c,syc9,sy74,PHUIyb,qNG0Fc,syca,sycb,sycd,sy7w,sy21,syc6,ywOR5c,sycf,sycj,EcW08c,wg1P6b,sycc,syce,sycg,sych,syci,t8tqF,SM1lmd,sycm,sycn,sybh,sybk,sycl,syco,vofJp,Vnjw0c,QwQO1b,sy84,syah,syag,sy7p,sy9o,syaj,syai,syb5,syb9,syb4,sy9m,syb2,QMSdQb,X16vkb,WdhPgc,JCrucd,sy4m,sy4l,sy4n,Ibqgte,ok0nye,Hzqecd,Vp87Bf,DhgO0d,sy6f,syeb,sy6t,syec,sy2b,sy2c,syee,sy7c,sycs,sbHRWb,syed,cNHZjb,oZECf,syaw,KFVhZe,sy4t,akEJMc,sy4u,sy4v,zG2TEe,sydd,fvFQfe,CNqcN,sydi,TOfxwf,sydn,sy2o,sy6d,sy6o,syax,syb0,sydo,sydm,syds,sydw,syef,syeg,A2m8uc,sy51,sy4x,sy4y,sy50,sy52,jjSbr,sydj,yUS4Lc,KOZzeb,sy7j,sy7l,syb7,xKXrob,sy7k,sy86,sy9z,sy9u,syaz,syb6,DPwS9e,sydy,sydx,sye3,sye0,syav,sydz,sya7,riEgMd,sye4,lSvzH,sydu,oCiKKc,sybn,sybp,YwHGTd,rxfmRc,OZjhxc,lLliLe,D8e5bc,j0HcBf,sydb,sydk,sydp,sydr,sydt,sydq,RGrRJf,OkF2xb,sy9v,xmYr4,UmOCme,ID6c7,syeh,rmdjlf"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.q("bCfhJc");.var PQb=["/viewform"];_.QY=function(a){_.Pt.call(this);this.N=a.service.kl;this.j=a.service.Ve.j;this.o=_.yI(this.j,8)\|\|"";this.H=new _.Su(a.service.window.get().location.href);this.O=_.Vu(this.H.clone(),"").toString()};_.B(_.QY,_.Rt);_.QY.ya=function(){return{service:{kl:_.HU,Ve:_.UW,window:_.tz}}};_.QQb=function(a,b){return b?_.yI(a.j,15):_.yI(a.N.j,14)};_.SQb=function(a){return _.RQb(a,!0,a.o)};_.RY=function(a,b){a=_.TQb(a);b&&_.Zu(a,"usp",b);return a.toString()};._.UQb=function(a){var b={"continue":a};a=_.qsa(b);if(typeof a=="undefined")throw Error("Eb");var c=new _.Xu(null);b=_.Js(b);for(var d=0;d<a.length;d++){var e=a[d],f=b[d];Array.isArray(f)?_.dv(c,e,f):c.add(e,f)}return _.Uu((new _.Su(_.Ada("forms-geu"))).km("/Login"),c).toString()};_.RQb=function(a,b,c){return""+_.yI(a.j,3)+(c?"/u/"+c:"")+"/d/"+_.QQb(a,b)};_.TQb=function(a){var b=b===void 0?!1:b;var c=new _.Su(a.O),d=_.Ea(PQb,"/v

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41584, version 1.0
Category:	downloaded
Size (bytes):	41584
Entropy (8bit):	7.995215789973138
Encrypted:	true
SSDEEP:	768:cnPRm/UHl9U8GO5hwHxngXQ5lUAcPtU6Y3dC52hPgxSJ:cPRS0TjTcnEQ5GPLcdbhoUJ
MD5:	71151932FDCC1AC7E09BF80A592DDA78
SHA1:	7049019D7FA6D570CA9B57525224313656B36E8D
SHA-256:	68C3F849762D80F759A7702F52B6F9C432173951D7D5E830C98CEDFDEBA5E53E
SHA-512:	B438132A3327189B36CDF6675E52A4E319735A180AFA9B44261F3E1C36F5EDC86F4F8EDC873CAD4520FF639D5A2A617C84155F535516249D334BC02BF8815DA5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrmAB-W4.woff2
Preview:	wOF2.......p......RL.............................4.`?STAT@..P........w..r..6.$..r. ........[J.qF..</(..RU...>.`.9.[%.N9....#.<H.;.Y.....".....x.GQ.3...p.Tx...r.Zs.j5.0...r..f..i.]O.xZ..\|...&;......j.8.i..&.......]...G...u....F.......]cs.x..a...r7...Udw+.+;P.R..Jh....U...puXL...>A...E........w..l.r.:m...T.VA...o....i.........Y./....H<@.(..0.Rp.....9FT{.}...]..[]....E.."...Tjr^..o..>...H....e H.mcD.u3V}K.......u...........[.D.F......-..v..v.d...1`....6"....F...>VR.......:<.....2.m.16.{.....uw\:..rD:Q.3..k.K%.......h....F..N}w.h..db:R....{y...."...#.N..i.34...<..n.O.`$..$..x/..x...........;...:!v.#.c..`..M..w.1!U"].ce......J...b.....u,g.(.\|+......%.}++...S...>.x.......o.+..L..>~{w...;..i.2.H..M....!K.#F.a.`..1[.-$>..9..y.:1..T.s/....u...V.C..`)..r....B....)"v...d0g+4....I.D.Ii.tw.ar.W.R5mO.......q0.Ys=>.A.U]...>.E.4U;n.....~.rx.....U9..v`.9./._...].$E..B..W....K...p)..)!...u.~...^.....I......N..o..Q......v....x.D..i.i........#.......

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41220, version 1.0
Category:	downloaded
Size (bytes):	41220
Entropy (8bit):	7.99561943989194
Encrypted:	true
SSDEEP:	768:gPAZkLg3cRlItx1huSxyO1hGxVgw8XQ5OgBRoKYMU1ZS/lgF9:g4k83xPuSxy6kxVgwCQ5r0hjA/g
MD5:	C8D3E0F677AC007C9FADBA09A1C4C7BC
SHA1:	83389D80FDF1BEE58E69DB1F38968404EAC57846
SHA-256:	A9ED2DC63202E8E1E06CC22EB23D39212A36034D90DBC76274EC7F85DEB1D3C2
SHA-512:	849C7C1D32C22286CB4216D92E2FA55E65FC3CD621780153F3758190694C0FB74821533B6F043C081F9B9327E5B911978B8BF7A79E12C1823090A5BE43200DF6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrlnAOW4.woff2
Preview:	wOF2..............Q..............................4.`?STATD..P.....t..'..r..6.$..r. ..r.....[..q.y.g...C..MV0..@w..{.5...q.b.<_...g'.2.z.n..4..{..D..)s48J.2U.LToD ...Q3e..~..3J.K&..6.J...J..X6.l.S..n.h...h..w.N...........2).x...T.^.....~........ .-..a....=..l{dK..).S...X.:....V.......k.?..z.!.>..20v....c......j..A..5...D....M(....v.w..3..:...:.:g.;sgE.M.#....6...E..@%%.OQ...R?.C.n......2&!.2....,B..5$.(2D..Q....vX..X.a..V......u..[..(EZ....(.D.{{..U.dM.`#%F.........Gic....z.O.....k.UJ.t..#...P1A...?....yI.F....I.,..y`f..K.-Z... .....m0.%q....[Wz../.....k7..1..j....{.Py.....e..b..@...g.s?X3.H....y...I.A....y.H....x..a.]..B.(.&Ai@...19.D.4.a..ky.........F...4.N.Bw........... K. A.......6w...5........%DL#.o...>0...C~\|.L....v.B!... p}....n.p....!..;...^.$F..3!9".....Ak....~f."8%@f-u.Op..T..[..r.{...B.H.".(....\|.P./V....v...}T..r+.p....x.....r....?...;fO@.........T....r.$.....w..........\|.%..?...?S....@.5.k..h..4.\|.o..$......4@V7)..:@........>..

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 100756, version 1.0
Category:	downloaded
Size (bytes):	100756
Entropy (8bit):	7.997403019876083
Encrypted:	true
SSDEEP:	3072:u1cBLNytW4L2twQPpIoRuqamQ1SgRwwENO51ev:KE5yttYpX0mR5wmv
MD5:	4498A1A925FD2D5630BA89B78739E194
SHA1:	C757EDCF6538B1F0968F69A7618C564DCAF7150A
SHA-256:	54EFCB5570863B2329C2C677749C85C7ED337F5C16BF38CAEA17807196150293
SHA-512:	3510CF6C3ED3786716329466F5575F63563B6C0DFEC2F78E3CA8C881F6C17EC066AC21EDDA970ACB377E610F1A5C937D9CBBE38DC690A30F12FEF49EDD93189D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9SIc.woff2
Preview:	wOF2..................0..........................<...8..2.`?STAT...P.....D..).....6.$.... ..~.....[..r...GE3n...g.T....&..^Z........Q'..#.Q...u.....+...U6L..$!P.co......4w...rIQs.'.nXX9....@...N.W.....X...Z6SI.(.........I...zC.H.U.[.M."............\.....w.N....Q.w...L-zGg%..S.....Bcwq!].z.H..V..T........w...7...jE1.:.zR.U-.....f.e.'._9.y".$"#.(...M...=....[t.X..Rv..1.>..g.o.P.?..q ....4RsP..I..?........].Oq..k .q...PJ.ii..}?.W.r.BA.Y_.M..........$,.Nd.:.'..r..(.q:/i.e..C.......:...kq.....8.}.8.S53..=&6...+..Y.YY.......o.>....s..x"5X......z...'h.D8<N .E....s....v...hh+........RE..5....D^.....i.i\.f..........~.xJs....n......Gl......%..X.L.VW.1.A.........Us...xp.G.^4.J.... ......#b..=uF..\Z.F....[x".y{....g..>..Z1....`....;<.?.~'.ui.q.z.0...Nz...9.l....h...Qa....\|........R.RjZ7..2h...g.T..Z.U./.....nCj/._..Z...... 1. ...H...&%......es!tbf..\.....h.k.\|......=...1...,.sxI....dcW./k...o....._...{k.N.....:.`.?......`..T.K..k.._.. ...D.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2560, version 1.0
Category:	downloaded
Size (bytes):	2560
Entropy (8bit):	7.866416223385858
Encrypted:	false
SSDEEP:	48:vsV74S5ahyIWiGdLsQG9/UstEqFvtUYdaxqn78LTxbnBMUFWqeX0uGh:vY4at4Gurk+vtBdak7cTvVF7eXg
MD5:	AAD954B1FF4E297C5D137133C4BB36C3
SHA1:	781A7FFB51D787FA807F1D861A4D003BD33E42E8
SHA-256:	C28A9A498502C596ED0275021BDAEF2A57225D9460C650706907FC95F7BA6D80
SHA-512:	149F0D8CC70A8D6D3567917DA7F43D125BAB19D1B420E6921C38E278196E168E3D3FAB6C2C3608ACBDA01F0A660267B35A5672DF80CC671B3167A4CCE4DE6D9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RkAo9_.woff2
Preview:	wOF2...............$................................ ...`?STATH.......L.s."..6.$.>. ..h.c.....(...v..I....y~...KxD=....XL.#...Hc..?.....{.............vgz..E..\.O.(.@..,..........FD5DHW:.....3a1.L...M.C..7Dj`(.\....\D.q..<o...............).>.......-....m.....;.......@..C5.@].9.6..J....}o.........T..F..%$.08.G....g..M..(.\|..Y..(.R .R...9.{aK.`.b/h.f?C/K..9.\|..M`.O...b..i.}....s......O.;.....7.!........Ep.Xx.....#tl......c...>v...1.E#]..k...j.aLK4,.n[.......>..U(c.'..K .....g1..l=.. ....&.9Z..".r..P!.K.....I.I..J..)W.p..+..:....u]A.FGG.{..:e..)w....%...Zt5n...G..;...5!......0...0.`....(....R.bQ...o..l...m].._L...fp.Lp].=..v.u.k]6y..+`...V..k...9:.e....c...c..v..oC.(_....F\|.&..e.ny....(....V&....s6..I..VR...RW.*k.P5j...^R{.r....`]Z..Iij^;.C.QCO..4.a$'.w.HC...E...{....i...2.....K5y.j.....v.#%..n.3...y.o_..:.:....c]......;E\.k...v..AI...r"..1.3.~'..T..{=...N..amh.S...1.."H-.8..bl...U..Wz.<..Vr..gi._..cwB..8.k..~...{.+xx3....C.^...)..k.Kz...lr^

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	dropped
Size (bytes):	121329
Entropy (8bit):	5.473441016381779
Encrypted:	false
SSDEEP:	1536:OYIcfKtW2VBk7UhuCFpn7KWntTbxsH5Id3VwrbPC7hw5O+qNAyyLO5/+QV5bPccK:dIyKGGK4z80enC7hR5bPcH388
MD5:	F10030C11ADD315E043B65E41AA7254A
SHA1:	286D8F55E81CD13AC68B87E321B93A4DFB71EC44
SHA-256:	B0DF1F414593AECA0C09A22E6F6C0C5D0AC5280D16D064DD5FF46F0E0902B476
SHA-512:	97736AAED31E0DB649D5888AE3F189D4337685CB94BC2455C9E6C573EED7A97FF63018AB929C2622EC95AF73158B14FEE5E0253DE2F55363A0ECB0650B89CE93
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25940, version 1.0
Category:	downloaded
Size (bytes):	25940
Entropy (8bit):	7.990402611464527
Encrypted:	true
SSDEEP:	768:h/no+9wjpn4U4LdAoKQfezKLBEKk5727+CmJsABNFjN:hvoZjeU4ioPLLGKkJ2l0VZ
MD5:	472997FA70DA7203D0AAF11F7B166C93
SHA1:	17B746D4980DF5C0EFFCB129B63FFF1FCBDB8999
SHA-256:	5110D967DAD4A4E2D1578B5A1E27E210F03DAD636892CEA6D7F8B1BB617BCF2B
SHA-512:	6BE9C1998D004BDB1299D23B2BCF3ADEE693893018842E9A5DE2E58B19023CADB16FE9A95F6FEF7DA70AFB203871C6C30E530221FE8E0FEA7AC08E911B34AF23
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsW_LU.woff2
Preview:	wOF2......eT..........d....................................`?STAT............].....6.$.... .....x.........tJ.U.....@.lW3......G"L:#.......&.9l3O.u`.........CSX5m...i.%W..!...8i...V.I".&V...%J.w..u...6....OU....rLy....c_..t...L(k..z..2.\|S...Lu..TK..../u.Y..5.P.>T........BJ,......&.#....T..K..e.5......D..~....'.v_.......g..D;U+.!..i..D.......I.........O&fm...0...\...!.2.h..&K....$T-..P.."......R^.xt.<....&y....\...h{b.H.../.2h...."."0n...K..]..=o>.U....RjD..G.[.wI.!..Bh.....@.,..W@.A........Qy..X.bD....Ry).B@.. t..s.w9....U....(2....e...cc,..l0`..RO...30..........(.....8......Z.=......bo.E..HFa7%M...8U.G.g.Nv...8x.d..`......a...i3..1..Rb.....H..N..l..x`.[..S.B..t....`.g.C..TB!..I.5tCix.3.b....e.c..E.Yi.T...7...`......L....!..l.9.O.~...X.XH.;s..^{.o).R .."^..\|...R....n:P...:H.v"..+..T.......i...9(...z.`{.. .D..\|..^.Z.?..i.T..FO.~../....f.."...IWUd..`....kr].;};...g.b.Q.&+*'....J..f`....Y...6..x.W.~.."..t.K..dd.....m4.!.NH....q.m........^...

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84892, version 1.0
Category:	downloaded
Size (bytes):	84892
Entropy (8bit):	7.997781229266095
Encrypted:	true
SSDEEP:	1536:HumAnFGBzYl9bxrG05M5ThANEoO4QrLn2da3f6f7kkz5NCuELhJe56NcYhDpI:O7KQxy05WTimoO4QrT2da3fakrG56Nc9
MD5:	0F0BE34D30705D3F21ECCBBFBFCBE983
SHA1:	96A0C04F6610AE014FC1179641861C1A96DD6DD0
SHA-256:	E05FD4C39D2671D0FEBCF551364287A41D4889CA4692817722459FF34940AC81
SHA-512:	45B00B7B0962DCB3BE109981A9D41682E36767F9A2056F6751B639B96F97824D59867B7700F61C68BABCF35FC1C4E3719E361B25339C10346CCB12694E1492C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ96F.woff2
Preview:	wOF2......K........x..K5..........................&...F..(.`..............@..6.. ..6.$..z. ..r.....K[.w.....>..f...G./...=[..l.Awl.e.....m[......p.`.MoL.........d"...Iv.IZ....._ac.6Ls...BWn.Rr&.4.y..]L...i..Ri.$5.>.......W...&./WtpW.I..$!...5.....#.k8.n..e....3...s].f.+.q.~.h..C...rZ..3B...._..d..W..5m.Y..%......H.z.)'M9O.U...yz:.m+-...>....N.:..2...[..nU...<G_z.;;......E.d...J....L1...{.....7..;{....I.K..s...x.JHF..Z@u.l......W.&..dp....#..>/..q&r!..0.0J/.........%.....j...k..].5...QM.O..t...A...m.69p.{..kr........w.v\|j...Cf...c\7...DZ.aL...l. .........{_o.6.cA.D.....a...3jb S..#....G.?C.'F7.. .....g........D.K...8...Z.J9D...T.ynU.............i.%Q.....H.1s........=.... F.T..(........5`."o...0X%.l#6rD..../v.Qo....~....~.!.m..y......g...!. ....pU..t..g..r..t.#1.0D...6...!.z.W6.N..P.$/..9..6.Q......7g....8.#...y.E8..#....?L-.80.B{..O...t..,..[[.E...6Y..T....$[.g...+.KX.. !4.xj.^..e.2+.:W.wV'.T/Z8..MJ...)M...............>.M.-.\|.k{

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	709248
Entropy (8bit):	5.597883960152324
Encrypted:	false
SSDEEP:	6144:TDld/4Y4oi90i/UrFAYdcjg/eMCTul28IblkNuHkOonQRJ9ergE895nJ:T5Z4Y4L7/2fRl28y/
MD5:	54358B6B8D9377A6F5B2A33D3C6F7FD7
SHA1:	611B57B58D1FCC7A911E4CB2A30DB973D3AD0B11
SHA-256:	FAD2AE60B76998A57C6790E88E1BEEFD6F630B6F8302AE1BE0F12469DBA381FB
SHA-512:	9EA05FAE68ACF13A9C0A78EE6AF472B6B15048B8FE0DC737120DF11B7B5ACC82091AD3BBAC428381DFF8B132C859394E6AC242516691E33DF179995A588CFEDE
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	downloaded
Size (bytes):	1473
Entropy (8bit):	5.303697512091567
Encrypted:	false
SSDEEP:	24:kMYD7D5uPajZ4Nnm0YyR6/cdF7P1FipIoxbnHJFCHGbAxwVGbICSFqVgOuEBO9Fb:o7DMy65tr+pIYTpFyGbAxwVGbICSEVGz
MD5:	3EB0C66F9441735BF794ADB335C4C8D3
SHA1:	0E22F5E607AC60D2F413205071CDFDAACA2CC369
SHA-256:	B6343AC18465EB73D272C7AB94CF7A1D45C2B62FF041C351D109E89B4CA2823C
SHA-512:	515DE0757EB87BE599BBF0142953C06B829790BE4E2D94E3F88558525C5CA321354F37D0BA2BA528BE13A9851DFDF15BD2A52512D5175A538CD4272B565377A4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.y1a=new _.wf(_.Dn);._.l();._.k("P6sQOc");.var E1a=!!(_.gi[0]>>28&1);var G1a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.ka=c;this.Da=d;this.Fa=e;this.aa=0;this.da=F1a(this)},H1a=function(a){var b={};_.Oa(a.kU(),function(e){b[e]=!0});var c=a.dU(),d=a.fU();return new G1a(a.ZQ(),c.aa()1E3,a.zT(),d.aa()1E3,b)},F1a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},I1a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var J1a=function(a){_.W.call(this,a.Ha);this.da=a.Ea.eX;this.fa=a.Ea.metadata;a=a.Ea.Tia;this.fetch=a.fetch.bind(a)};_.K(J1a,_.W);J1a.Ca=function(){return{Ea:{eX:_.B1a,metadata:_.y1a,Tia:_.U0a}}};J1a.prototype.aa=function(a,b){if(this.fa.getType(a.Pd())!==1)return _.On(a);var c=this.da.qW;return(c=c?H1a(c):null)&&I1a(c)?_.qza(a,K1a(this,a,b,c)):_.On(a)};.var K1a=function(a,b,c,d){return c.then(function(e){return e},fu

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	downloaded
Size (bytes):	2031
Entropy (8bit):	5.300532285140964
Encrypted:	false
SSDEEP:	48:o7kBUkwL3ALFemWDs97nR791kOkrk1nf23R/rIoparw:olLgF/WDQV9jkrkpwUyGw
MD5:	C3AD6ADC213B7FEF3DD7F84CC4CA411B
SHA1:	D8CBD564DEB55210D121170A70FB2FECABA6C12C
SHA-256:	F3BC232BC2C9256AC5347F5921D88D9A3B1EC31F7E99F49B98992C14A7515FB0
SHA-512:	604010159DEB1EADC76893B5B2339EF9924215207558EE3C546F0624D5DB9E531B8155AF0CB57DC09A5B93C2881A2E5E90F7B51BAF4FE58AC1E7FC7930491220
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.lZ=function(a){_.W.call(this,a.Ha);this.window=a.Ea.window.get();this.oc=a.Ea.oc};_.K(_.lZ,_.W);_.lZ.Ca=function(){return{Ea:{window:_.av,oc:_.MF}}};_.lZ.prototype.Up=function(){};_.lZ.prototype.addEncryptionRecoveryMethod=function(){};_.mZ=function(a){return(a==null?void 0:a.Np)\|\|function(){}};_.nZ=function(a){return(a==null?void 0:a.L4)\|\|function(){}};_.iVb=function(a){return(a==null?void 0:a.Gq)\|\|function(){}};._.jVb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.kVb=function(a){setTimeout(function(){throw a;},0)};_.lZ.prototype.aQ=function(){return!0};_.oZ=function(a,b,c,d){c=c===void 0?"":c;a=a.oc;var e=a.UP,f=new _.BF;b=_.Wj(f,7,_.GXa,b==null?b:_.Qc(b));e.call(a,305,b,d,void 0,void 0,_.bUb(new _.AF,_.aUb(new _.HY,c)))};

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	546221
Entropy (8bit):	5.5507400530194175
Encrypted:	false
SSDEEP:	6144:eY8HcavgUEXAiPi+VFhyb8sdekeoQbzUUNfE+Dr8KC:eBy0lUNfE+X8j
MD5:	45E7973E5C507264D2D97EE7EFE8AA5E
SHA1:	03F7DCEA565912312766D33232516FE33DD3FBCD
SHA-256:	F82D636D3E2E32D223DAEFC3CCC76BC6064DA4098E5CCDC9EC66F8C41AAED7F9
SHA-512:	126D941360E1A937A683D002FC16F478D2BA151F0B1BCFB56A0CE735976FB103D98E465FC15FF71021F2693C6E70FC936713AEA289AA0D3DE711548E2E0218BE
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.2m9rdWaS4Gs.O/am=MBg/d=1/rs=AMjVe6h3G7zmzsZZYBDDnQmsz-PK-2-isQ/m=viewer_base
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ia,la,baa,caa,daa,eaa,sa,faa,jaa,maa,oaa,taa,uaa,$a,bb,db,vaa,xaa,yaa,mb,nb,Baa,ob,pb,Caa,Daa,ub,Haa,Iaa,xb,Kaa,Maa,Naa,Oaa,Jaa,Bb,Uaa,Vaa,Waa,Xaa,Yaa,Zaa,Jb,$aa,Raa,aba,Ib,Saa,Taa,bba,cba,dba,fba,hba,iba,kba,mba,nba,pba,qba,rba,Wb,sba,wba,xba,zba,Aba,Bba,Cba,Dba,Eba,yba,Fba,Iba,Kba,Jba,Nba,ac,Pba,Oba,Rba,Sba,Vba,Wba,Xba,hc,bca,eca,fca,gc,ic,gca,hca,ica,mca,pca,jca,oca,nca,lca,kca,qca,rca,tca,u

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=m3ux95j3sy8i
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 56400, version 1.0
Category:	downloaded
Size (bytes):	56400
Entropy (8bit):	7.995762971161193
Encrypted:	true
SSDEEP:	1536:be75r4KjZmdlgmzLW55/T7hTqUQJAcKhzOj5Qn:be7OCmrzy5lhuUQJAcAzF
MD5:	89504DB9C154014CBF26C05734DDF3BF
SHA1:	444A3053DB72793088DEB484FF320D324058ED11
SHA-256:	AEC3C066BE05CA60A6627DBBD61CAA9F8BBACF17905A481108C1675AF298D03D
SHA-512:	EFE8C37F8163298D690A61EB7B690564EBAB97C5B0F991BE219E9549FA282887CB4159B5D0936B68A3AFDCBDCF18A1785F5ABF169587F3C0791FCC060280DBAE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v14/rnCr-xNNww_2s0amA-M7.woff2
Preview:	wOF2.......P.......`..............................x........`.....d..............x..6.$..l. ..4..K..o[.R...qm.:wc..B.!...Vb.y.g".c7.ahY.c...t2.Q..@Om..m@%}..9.........Lb....n@.R..Gk...;!2.....;.;.R\..&...Ljnbl...q.u\..2,{....fx..n._.F.d......6.m........-.w.Z;.Fd..<.`c0.r...\FwB.2.4...$..+=...$&NNR...gOo~.'a.h.37]..m.K...W.\|..R2......M5.......6\R.j..7p.G-...X.1..A.............L......tzX.g....b....o..h.......gL....F..K......8.:......d.k}.FOr.....Ie..p..]......F'=G.lQ&...07....eA...OM.:g.LX....R.M.M.K{.)1d..?aF.3..=.R..S.N.J..!.T.C(e].......>+.xA.......71....lq....)%.........Y.C...\|...\|...@5.x....v7.n.l.6J.Hl.@.Lj.{@{@....sN.z...Tj4........-...FX....n...sp<F".7<.6....w..w.\..H........10.T.Y....f.6cQn...t.r...."...&..>y...X=...onr........O..I....'....@0.....].....?.....`.v...7.pBY..D.p.d..>..X.3UnJ..\L.\|..5..,.....'@.....\....[.-!a.$...J.y...`@(..(...V....o.n=......_#..Q...O.N.6@.....)..h.5cn....k...b....B^.B..(......BQ....p..+.._

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 380, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17180
Entropy (8bit):	7.862064150328919
Encrypted:	false
SSDEEP:	384:SA8KVF93kBtoN7Lwsxswpoklfj8u/+U0H+OB7FRsaZh:nVkBtMGyDlr8DkO/R77
MD5:	3DC67086A02E69C9A18141627B1CA27A
SHA1:	17B91322A37755FC377D7D10BA0503B51426B4B2
SHA-256:	E1E80B06F1B936EB8096C2CC37F5AEDA813855A9A806D195A10DB6DDB1752F53
SHA-512:	F7DBDE50F787D5E091244C204CFAC480007DEB2F65904F117C5889FB8E0EA3A0ED271963584EA20AAEE9F6CA7E043ACD59E56F75A5F5EDE1F90D4CACF76B7398
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p...\|.....O9.E..B.IDATx...."Q.E..k.x...`?,.5..y7.)...s.......).{..................C.. .=33......?.p.)........t..\|...........VRkw:.....t.=UY...L./.Dik&w......;......9.E`.}..5e.d'...d.W=....o.......O..RuehS....}.0.X..x<..x...:zU.....i^.p>.......r`..~..h..,pE.J.].[QG....k...m...<.&.>..R+U...L}8@... "..P..F.......d...U.-...._x........g..,g]..`.z..=..$.!..........S.\|}..>..P.a...onnvS..wuu...RC?_R..C^.tm.)..t>..=..z......uh.....Rrh.s`SH.aMz`K.,.~.r..."........E-...}....p..\.JM..m...8&r.......yrdV.'m9...)..((iz.0...........s]X.................-....tk&t9.V)...~.H.CD..dK7 ...3L7.l..w......\|......3=.....}.aX&.23..L.ef....ef.6.Q.A/C.f .T'..<.L.3..r........{........nqB..=...~...<.c....199......,,,.>{..g.;......;.......&...x(..............1::...{..F.O......e.........fl.......I{.......U...sm.i.vhOH.G.5........k.H.I;}.t..G/^.8]4..........z..].:7t..i.....)T..mW..0s.J{u]BT..B..-.\|....}.......%...y.3kQU........._.<...~sdd......]..]w.f.s

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	dropped
Size (bytes):	1473
Entropy (8bit):	5.303697512091567
Encrypted:	false
SSDEEP:	24:kMYD7D5uPajZ4Nnm0YyR6/cdF7P1FipIoxbnHJFCHGbAxwVGbICSFqVgOuEBO9Fb:o7DMy65tr+pIYTpFyGbAxwVGbICSEVGz
MD5:	3EB0C66F9441735BF794ADB335C4C8D3
SHA1:	0E22F5E607AC60D2F413205071CDFDAACA2CC369
SHA-256:	B6343AC18465EB73D272C7AB94CF7A1D45C2B62FF041C351D109E89B4CA2823C
SHA-512:	515DE0757EB87BE599BBF0142953C06B829790BE4E2D94E3F88558525C5CA321354F37D0BA2BA528BE13A9851DFDF15BD2A52512D5175A538CD4272B565377A4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.y1a=new _.wf(_.Dn);._.l();._.k("P6sQOc");.var E1a=!!(_.gi[0]>>28&1);var G1a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.ka=c;this.Da=d;this.Fa=e;this.aa=0;this.da=F1a(this)},H1a=function(a){var b={};_.Oa(a.kU(),function(e){b[e]=!0});var c=a.dU(),d=a.fU();return new G1a(a.ZQ(),c.aa()1E3,a.zT(),d.aa()1E3,b)},F1a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},I1a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var J1a=function(a){_.W.call(this,a.Ha);this.da=a.Ea.eX;this.fa=a.Ea.metadata;a=a.Ea.Tia;this.fetch=a.fetch.bind(a)};_.K(J1a,_.W);J1a.Ca=function(){return{Ea:{eX:_.B1a,metadata:_.y1a,Tia:_.U0a}}};J1a.prototype.aa=function(a,b){if(this.fa.getType(a.Pd())!==1)return _.On(a);var c=this.da.qW;return(c=c?H1a(c):null)&&I1a(c)?_.qza(a,K1a(this,a,b,c)):_.On(a)};.var K1a=function(a,b,c,d){return c.then(function(e){return e},fu

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61920, version 1.0
Category:	downloaded
Size (bytes):	61920
Entropy (8bit):	7.996214409443772
Encrypted:	true
SSDEEP:	1536:HuomhDq6KdXr6849M/Q6pRI+VR5alROriQ+UW+H78PyYu:Oo2qlX28R/Q6pRbw/grrJ76yYu
MD5:	88EECBB07B31C1C84F72DBCD0222301C
SHA1:	A32191D3E1B6722239CF82EAF6C34038C18BBB32
SHA-256:	E22CEFA6ED9BECBFD822D92B5E31D4DD1880B8DFB81441FB703D0FBE3E5C312D
SHA-512:	5864F250FC6B89C0DB008F9AC6C6EF4626DBCCBB72F36998C27C8386191FFEBD6624DE5587913ABE064F3995F270C9370C9DB0EEE6989FE2DE217F22C6717A57
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew7.woff2
Preview:	wOF2..................t..............................x..B.`?STATH..l.\|...........\..p..6.$..\. ..Z..y..([.....ct...............r..c;.B..qx.....{.=ma.\oV5.p.........M.C...n...6.D.R+... M..-&..9.....0F.FLp13c.....o.e^/.H=.......a..h.z...c..-.j.+Lua&,..,...i..f.F....Z..7[.qD...TI.TI}V...6.@.......d.......Ms.+..H7k9'.RD.....-"i..?.?>et..........=..i..wG....;...(.....?.AF....#\c...W.......2...Y..1.....]..K.jdw.d....S.....4P..6P.a......`.a/.....c..~...7b\|..32..Z...S.L....&.o...&....@R.p$e....GCO...:;......:..H.T...)..../a.a..\.]...Q.k..BT;........L...2..-...A..Dul.=...U].1.Z.#.x.>.....W.+...e.^.(.%...,$J...FEQl....#.T<....8...]j...kv....D.. ...8..9<Ax...y....?.c..'r"......a..[.D......_D>w.....Rb..X...+6...l.Q!U......qzV...g..'V_.....+!.s../..u~....IH ?c..1.E.0.I_............v.:.aj}.SEu..w.{.'1.<HB..!v..8.@.n~a.x..LH0m..)..Z.e.}.......S...k..9\.(W2.....E..q...:._..._.../....._-T%+....!......B.8\|B..E\|......i..R.!5bK.QO-+fX..}...e..E..I.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50032, version 1.0
Category:	downloaded
Size (bytes):	50032
Entropy (8bit):	7.99687526963219
Encrypted:	true
SSDEEP:	1536:h8sQnAgDeh7Kf63FlHVeVEV9R4998yO5d4NWvFI:6s0AquH1lHAqV9RYJO34sv2
MD5:	3A1D827D4C9CEA1A4D9AC216BF6A3D0B
SHA1:	B3464CCD91897B1DB6CF5EB06E7A4F89F31EDB94
SHA-256:	CC7B21390D89052DA348CF014A9F38412956B535BA362D5021CF9B2707F03DF6
SHA-512:	E2D8C5FC730AB3E648E2DCA07F462E993E2125D777B16A5FE393D1EB3A2EFEEBEFB65A7BACD058AE04B3A6B3E0883F6952824692AE28696011052C7737BBB19F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Me4A.woff2
Preview:	wOF2.......p......................................j...j..j.`....T..<..... .....Z...x.6.$..0. ..t. ..I[K.q..v..T.n2.H7.u%....A.-.r.L...MCx...p...%......8.o;.mw.T....&.Ia...J)%.t...5g.mo.......p..Y....O...yV..j^.Li.5a.1....:66?.)..).G...ptC..e..aS.K...r.....(.w.l..r...wE..iC..F.U._jK...S.mT.j.)>.."....T.{L!.?>7t.....wUn}.d"...:\...0.J..@.....Z...-M\|.8JRe3...a.'.?E........Z.).R..!?....6.%.....gI...../.Wc....{...J$!+ ..$..]XG..}..y~n..{.`..aQ.1.9b...0..#.. ....&..........G+"6.....7@s.ncTKJ..D.........5r..6j0......Ry.Q.~.xq/.=[.3..h..\|SRD.I.....ss.].!)$.I.......9.......d......c..a;..[R_..f'.Pw`...]..~.....\|......p<."..........,...9o...$..H......@.+\...t....5vJ...Y.GI .,.}k......k?O.V.X....a5..X $<B...]..P..d..T...o....d`FFDF.VRqC=l..?..Cn.........%..YB....{#\..o...f-.DdL....}\|.!.=.~k...,.....H^....c;..e[.`.c....t.^...0\|.3..G...u.D0...tN..hX...(.....S\|..a.".\|a........j"...o...1N4..c.n...L.PM...?......jT.on..+-,.e.....b??...yY..k..v.+a.Z........J.,.7.....

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37800, version 1.0
Category:	downloaded
Size (bytes):	37800
Entropy (8bit):	7.993884030418155
Encrypted:	true
SSDEEP:	768:SO2l7xREG7vwgbAhzZMu7I/5WqSdZxoIMfKLhDAm7Yl68:S9HRDI3Mu0UqkPMfKLhD97Yv
MD5:	2B097CB2DC262C764A2C97D4E233918D
SHA1:	83DB49B6B6DDA13ADC82726197CC2B243EF647DC
SHA-256:	7615AED2ED8F1361D3ABA2B6CE6612468463E660E8BD4A4302B24C113EC57308
SHA-512:	74193AA72286C60886138955917F87171F2FE483D6C2F35BB1CF1D17A0390F05149FF73EF7AC5550281A45CB0F9608D9C1BBB3AA5C3DA2843D21F61111601333
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_Of2PRg.woff2
Preview:	wOF2..............7....L.........................4.`?STATD..`.....$.."..r..6.$..r. ..l........'pg..q;h...g.......E...U0.....x.}......Td.6...c......Q...j..M...e5EJ.V'..#%.Y..m....\..>.....S..k.$/.g$.gZn>..0..S..&\Y..A{.......t.......6....A.!.y.Y;.].~..........?G.'...u....U`...Q+NT.._/...}FrF:.'.+7.q_....%=...1....,...=:...A.....,@B.D..x.......7...~{.WAd..VU.../.>.Rb..!B....tX.i$.,H...a.......)....b..z..>........y....1`.`...T.h4....\...b...fV....#O9.$...MCB.W.~Z..N^.6.5..<.x.u.X.....$U8.G`4N".'<Dp.wY...2=.kXK...0..........7.......M.....!p..@D..:v.:.-.o...)...a..8..l....<.\...x.gT..........m...0..8.A>..h...[0...0..8A.%r...{.......f.......L..9....*p..........q.[^6..s.....[h.-.. ....#.E._..Z&.g......)....T7%,![........A.8...b......C...@....Z..9QK{.4.{4.T...o.....D.1ib..Y.9.=.}.3.T.h.b%B.f.&."-R2$.......R....+y...+OW....T.Jgy..(..F.2.}...F.)......^.T.....a.t..i.....g....."....R.J@.s.BU....,fvAp......H../../Q.;,...`..y....+&9.T.(C..sw.;We...nzwn.+.........q.`.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57236, version 1.0
Category:	downloaded
Size (bytes):	57236
Entropy (8bit):	7.99608783144297
Encrypted:	true
SSDEEP:	1536:L3JWy0wublqOS8eUCwnd3nVvgx5iMYZsFFcnEzHcV12+1w:L5pAbllS8iwndXVvwUsFFUqHcV1f1w
MD5:	212D9F17F0F5D037532FA3B8FC14B8DE
SHA1:	C332A9F57F2C7931F2A930B5D91BCF244E38FC42
SHA-256:	53B183E10D8C5DB234637E82BEF4014117BD41C956C69AF55FA0165A7BE31666
SHA-512:	F36B776390830548F3B7931B223E94301D1711C41D8E9F0AE43A50EAF9B3D0B1FDC66708802E2C53F416A7DCFE8937EFAF1BA0CF15CF83E20C955AA3853D1710
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNpWg.woff2
Preview:	wOF2..............P..............................t..^..T.`..(.....m.....`........6.$..\|. ..Z.....1[....n;.U.p....JF+._.7.Sn..IA..o.l..n.,...p......d!r.}.>I.6PU..f$....);9.R.j.J..B.....PJ..!...u.\|.'{/K.M.L)..h1.......g..k.9^3f.y.S..>].z.o."(......V}.?LE...EyF.Y.J..v.v..E..S...:..+.{......Rag.DOT.1._.....Up..V.V..5.W....xg.G......}.fH"!........'q.....{t...z}i).9.C)E.CR.;..5.......#.W..W[.l......A..D[..m.k.Y9y......U....W...?...o.{...(...$G.3D.c..s...6....;.:.msn..v..lv........{...4..-3.-....T.vJ....-W$...:<.$\.....{>{.u.....&qSq......"L.E4.u.......{^.>.iT..2.d...R...JX....j..X.{g..9...A0....q"C..G....W.e...vM!t.@.=Q......G....3...0.D....X.......pwQBa.HC..`wm.d............@.B v...@.$A........j.......n..uZ...n.^.+..K.o.@w.ap).a..!Q....4....f..Q.k.....1..P?.....a.....'>....5.<...... ../.....8...~.S...z...iT.\.k...;K......D~..K....P.7.?.....P..!.%P..Z....r...U{..'......2kDP.8.......L'..A...C....k.M.P.nJ........$'...bW...a..v.j.hv{+.?.;.._.L...A=b.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 62168, version 1.0
Category:	downloaded
Size (bytes):	62168
Entropy (8bit):	7.9960533178590225
Encrypted:	true
SSDEEP:	1536:Tx9sE8Uyqjc6T82ICJZ5VwyMSjpXh8mYilPu4+DdKzpw+iqZwMDH:t6c3jc6T82ICJ3V6I24+DI1w+NX
MD5:	C88DA33CEC75404EF947F3AA133B5611
SHA1:	A500A264783BF1A4604F8B42AAE8BF0E4C4B8815
SHA-256:	61DD37140E07D05BAD405557D1C30856058F551FC7FFF4112A09389285719669
SHA-512:	04AC1DB2180C4DCDE5E4E51042824DE0E9A20420331CBA140570633029F88AC8FE59A818B6EB4407BC278741FA83C6037A5B649E6F8EFF777CC8E9C6FE187344
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v14/rnCs-xNNww_2s0amA9uCt13D.woff2
Preview:	wOF2...................s..............................T....`.....d........X..B..x..6.$..l. .....K..o[.o.Dk.m/.W.T...O;EJ~p.VM>..0EV>....)R(...u...pgo..V%.A.;...........5.........h.O...<m.....h.b..J"s..T.M...f..Ku............>.a.g.+.G:x..\|NYY......U...ym...F..J.../.....M.<l.e.R........G..,.6&9.r.M#uMY....k.a..Y(.%.....\..3.`..c....T(.v..f.].Q.POB.z.y....K... .u~..U.....+Tr.(Y?......H..M....Z-T>..+NJ.#.;.#,.br5..sxX........../,P....O.L.&F......Q..._C.qu...r.W>......K{8......].n.[.v.W..J.\|.....440.,[,.?....'b.f...@...%..\.B.V......)O2./.>..7.)T<..$.xz....QK.Q{..EF...P..NH.Gx....D..x.b....%..b..uf%..X....N.^.N..wE..9kt.._.7uso"!....&..O..V..'.LmX..r)mp....&..\|....(.M...gpW.;..E..~?.\{.....f...........n..P,\Y......0....U.Q#..)..Z."....@..H. z..Qs..XA..e.f.5......^..[..TH..N$.+@.U.....T.K..g...<<y..?_....Y.)f..8.1cF.=si.Y[[.rs.nS0.Z....#..._..\.XL+......B......[.AQ..h.w$.....x,..ZEUme... .3.Kt.s_o.......a.........K^....T.u......b.I........n.2R5.X

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59248, version 1.0
Category:	downloaded
Size (bytes):	59248
Entropy (8bit):	7.994852785932296
Encrypted:	true
SSDEEP:	1536:0sNhKSeCshb3BshrezfaFGziakHEYTVLWROFsXCnNv:a3d7aFGeRwR4v
MD5:	1AF9E819961450561E83CAC6EEB7DA3F
SHA1:	C095AF8B74E986B2A8C31612C152AEB1BBCAD527
SHA-256:	44E1A7E76DDC65B9E7950B636D912348BE949BC1618F51B1E549218293FDA5AE
SHA-512:	D5687A98427D2383723CB1C5792B39E6236B751B08099D9F85F723E4172007609E374777B73C1FB837534BDCBB2FF74D615E74F28C3BB17236EEEFBCFE74D974
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v14/rnCt-xNNww_2s0amA9M8kng.woff2
Preview:	wOF2.......p......................................x...>....`.....d........\..F..x..6.$..l. ..,..K..o[#t......~.......J....o.oE....e.p...j.y.y....F.K.^.............K...#...Q@.U.......9.BL>..e..W...[...5..8q.J....D.{..'..NC.g...{....n.y.."...E.d.4R.+&.)......<...M..T.....j..%{.....C.w. p.F:...3...n...I....^.7...........q}..PZ.2Gz...)...!.?...\.6(....!.Z+JIy.H..v....E.cdg.....C....H..._..p"..&w..1..Gz.bz A#>.....(ZKV.&.+.l.p.....(./y.=k6.T1.i0...'.F......oZ.>....VsYf.M.J<..<.3E.L.U.Q......7..U.'Fim..S..m..[.............S..p%.....d...:a.p..O..."L<.=S...{.V]..lX........<.$....HQ.^"\......R.......{..,.\|.Q...>....W,.....\|a0.JK.;6sb....=.@.gkb..x.....d...-..[.s.cRMXl.....s.O.$..?.&...Z...v.....s.{..$\|.......X..b.t..b....G..{?....s.N.....'..;.\.) m......s...`.....(XT0j.(QA...1..D...^y..S/..rx....Q.=..3..8..t..<E-..eT....Q...j9dA .aD...o{.....=^......A-...^",.!..a....B.c.fg.E..(.O.(V..F.tH.J.....N.....F...s..=.8.T....?^....&A=....lM..UV][

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (391)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.263979402825174
Encrypted:	false
SSDEEP:	48:o7Re2n7saUpaBfYgWmEMxIxNpA7DbvbPrw:o+paBf5Wwuy/w
MD5:	5A3E89F4CD54E585083556EC44CC8927
SHA1:	D2266F227B69876070A1E5AB6F7AA9DC89C1783B
SHA-256:	0D669E32B176E6D2DC8728329938FF5802A653956DA9C500445F7C255C070EA0
SHA-512:	7049B8A40AEC34E2E0DFDD59BA4F156069AAAB08FA9AE24B78AC0E6C859B208325E96FF06D7DF719C5E9CA32C4BBD4B3040F3BBE8A5BD3E753E4352A2BDB5498
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Jg(_.sma);_.YA=function(a){_.W.call(this,a.Ha);this.aa=a.Ya.cache};_.K(_.YA,_.W);_.YA.Ca=function(){return{Ya:{cache:_.Rt}}};_.YA.prototype.execute=function(a){_.Gb(a,function(b){var c;_.gf(b)&&(c=b.jb.hc(b.ob));c&&this.aa.sI(c)},this);return{}};_.Yu(_.yma,_.YA);._.l();._.k("ZDZcre");.var q2a=function(a){_.W.call(this,a.Ha);this.aa=_.KH();this.en=a.Ea.en;this.E5=a.Ea.metadata};_.K(q2a,_.W);q2a.Ca=function(){return{Ea:{en:_.NH,metadata:_.y1a}}};q2a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.E5.getType(c.Pd())===2?b.en.Rb(c):b.en.fetch(c);return _.pm(c,_.OH)?d.then(function(e){return _.Ld(e)}):d},this)};_.Yu(_.Dma,q2a);._.l();._.k("K5nYTd");._.x1a=new _.wf(_.zma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var C1a=function(a){_.W.call(this,a.Ha);this.aa=a.Ea.mS};_.K(C1a,_.W);C1a.Ca=funct

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37632, version 1.0
Category:	downloaded
Size (bytes):	37632
Entropy (8bit):	7.994612552386459
Encrypted:	true
SSDEEP:	768:j3igNBn3RfzwBFOw6FZ5kUezAtdnMlWCTd18T8b4Coa/a5oUO3ULsegB45r:j33B3BaFO9FEUiATWT8T8bAaCeBEJh
MD5:	1FFAA430DEB705DF128762D9990F8EFE
SHA1:	847F8CA1CF199A602AEF0EF42AEBF5F825584E19
SHA-256:	2706DFABCBAAF2DEE90C3A10C168D5F5691CE787DCAE9E77CD038F66B08FC4BA
SHA-512:	24B0B6016AAFD2C96C5110B4EB19FDB965E4F12007552E710B33F38E7621F3329D28570BA40E25041E17FE27624DE52294890585836590B509F2BF28DD92736D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vqPRg.woff2
Preview:	wOF2..............7,.............................4.`?STATH..`.....p..n..r..6.$..r. .........A.'.m.....h.j..a.......II.k...q........d#.<x=..\|S3..@..;..#....J..p.xx.<..R.....E].&...R.....L....6k..(x.E."H....v.A...x[...1...Z.G....j....q.).....W.D.pe..w.8..M...{.\|....G...KlS..2.vi3DC...<.......b.$.n... ..J0gx~..N....M..S=....j..w....b%z.7Q[.....6......y...(x..3...y.~..Q..0.l@.c.c...t.17.......X..f.Q..z.7...r........,..-..x.+A..I"..M.i..?..?\|..).J7.F0......U.....z..i3..:%.X.0%.'...7..v{.......hCz..y..8u.....!.......`.z..../.=S.Jh...P.....T.&n%V[..sp^.aB.A.k.....f.8..n.i^[1#[..........d......-.....ST.}gN......ZK.Z. /I..b.H..4.y...m...g..#.GI.s....F8..d...V..L.........i.....g${.......t..Q..M...s...u.%K...\|..0.6...\|..<......6.....;.0".....P.x.y..y.\P.B\.......e6..Y.nq9.v$....=....'....?...B....d9E.....,f9.....b..d+\..S.k\|].d.\Y..>.9..[..f.=c]...36.$,~UQMU.@.`0..c......4.Z.v..s.KkM.^..^..E......?Uu......{...0..K...i.6B..A..I5..I.....\|..LN.-k.....1.jPu.F

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43772, version 1.0
Category:	downloaded
Size (bytes):	43772
Entropy (8bit):	7.99497933742288
Encrypted:	true
SSDEEP:	768:nl5ER4tVdeSUthhWfoDHea0tGdFOIHPyCdHLBdv6pGXw9XozpskEePJBsfJM3V:WO00uea0twFO2TdrBgpGg5wtBBsfJMl
MD5:	36338672609C9EC1D83AF4E1AFF7B0AD
SHA1:	287BF3611440E9377DD71C0620AA63448D632F06
SHA-256:	E268433F792E81D03D24617E0A4D6ECB5728278A805E7D12493E06802AA671A7
SHA-512:	6A4F62F6BFB02679F2887CB62E1BAB06F5FAFEB80BA44AED733ABFD0FBD1F8EAF545316958CC8D5FD74E6685D68CDC1BC037FA02810FFF98BC9EB95719DA7A1C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_k-UbtM.woff2
Preview:	wOF2..............................................d...$..f.`?STAT@..t.....l..=..\..6.$..4. ........[.{..5.....+..kL.J.....)x.].....J..'...R.........IE.K3.vcx.....Bp..G.:D..UT...{C......P@F..r8+..d.!Si.$..F..7..v...{.>..+u..u..,v.g.J..%g.%.D%Q).^2..n....JT..jF.7C..H..8...d..D.V".&...\|>^[.e.l...J.YYD0W0_..n..ulm..y..2...M_<.b'3H..'..+Yb. .w#..h..o.1.coJ........)mO..s....!'J^D....KC.,sa-.?.../Q....3....o.......g.....t).y.=..U.%o..q#k.&_.?C..ff....8.82..W..0...D.V@..$-.BZ.$JE.8...<D....@.m....%.....w..rw.jr.XP1.H.Q%.. ...."..H.(.X..-...A....q...v.....]K....D.QB.Eb.q..</.....y..G..<v....w1/W1.i...O...sU....P.z.L{.K4.T.I.po.^g...]....JK..7}......._x.7.g.a.w.%..r....`..+5.a....>A=......H#1...s.58/..d....#....-?l.[y.........i...p.x....@@.v....AhF4...!........A.....}._.........V.J.(.D(.R.G!.RPa...? .W...Wo......%5h......Q....J#ZI..oN.......I../......K..(...)@....h.R.+...9.9...C.Q........z.u.DI......L..7.p.{...l*J.&..y!.I..C......W..vEk.....k.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5044, version 1.0
Category:	downloaded
Size (bytes):	5044
Entropy (8bit):	7.951901332858743
Encrypted:	false
SSDEEP:	96:9gXfiL8sKiR//gg+2nyE6gbhIs64Ib/i8E66d2Rt+6TRtzBr886h:WPehKiRXgg/nEuk4k6366dS+6TDBrU
MD5:	5E37F6030CF935F9CBD3FF5A22E08D2E
SHA1:	C77AE7DD7501F4F578884BC034004F8619FC3D17
SHA-256:	867352B1C82C47D71A11744E3886441A848780DCA87928BAC596E5F3473BFAA3
SHA-512:	32D2C92FE4A8EA3A5DA9F103F6E36CF035804F529DD488A593A700566FF14A1B6F2A02AB9527818F7891DB88C6DAF5451251D21A6C8CD2FAA637884D142D3C08
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ-6B6Mk.woff2
Preview:	wOF2..............)`...W............................h....`.t.................6.$.X. ..r....K..&#........<./...1.x."..T.Vx..j.)...UUoG....@..X...d.~.W....l.3H.Y.e.......+?RX.(.Z.#.....#.i...y.~?...x.M...7..%..D"$.....i..).25f..2.........f..%.ifB..mQc....2=4%]I.....WWrQ%..(..g.......k..o.z..]...$`....._....Y"..Y8b.......(m..O..WM:...1."...H..r...B..!..sN..,%In.P....1pH.$.i.g. .+K1.V..{%. ..A....l9.x.P...'..W.$...B......M.5W...j.3..gc%..zk4.[.E............m.q.6G@DT.Q..S...5vY3j.!....i...h...=.Ox..._9Q$WPX\..2..<..R+qYG..H..K./.F^}.....=.\/W<.6.....4.l.\t.......^.Q...Q....`.Hn.Y..Z.BI...eCP.......\....f\|w......5..^..eK~\~p.....$!....S3.....-..e@w.....2..f.W....`?d.'...........)(..8^.cO.}.f\.(...[.;q[.Q..e.wR./S.@q......q.l..q.z..m\|.p.H....9...W.....-...5..ZB:.......YV.jC....[.....7...n;m.d.I.F.ly...O.bW.R.d....c..M...^v9[j....'......r.z_......7./...~A....W.\|Mci...Q.7...9.A..i...\....2.`.W_ ....6...()..s....7.\..j.....@o....m....w...6.....,

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 142920, version 1.0
Category:	downloaded
Size (bytes):	142920
Entropy (8bit):	7.998331954193963
Encrypted:	true
SSDEEP:	3072:wQumXsnnqTz5xa0PfTg2r1coEUOUKO+rE/FYSgEpF4XONoe:wQOU5xRhroqCrE/FHgEQ+Ke
MD5:	643086F598435216DC497F1FE1174F85
SHA1:	FD3050CC2BFCB38D36876B66CAA15D97AD3098BE
SHA-256:	15FCE9FC686A7ED24AE85F394838CCA6DC46CA2AA43DF5E35A9EDCD3EAF3577F
SHA-512:	CC899A561B18A00EBD949238CCEEFB78EBB0D7F61579C20DE1EBC6AD1273D6C393E3CB7DF0A41A8DEEE3B30EC9325F3443C5A760ED9C9BEC93BBE5E185A6C68A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-DPNUBg.woff2
Preview:	wOF2.......H.........-...........................>......P.`?STATD...B.....$........6.$.... ..P...J..[2..^y..>_..h\|..m.L..M.`...n.Yy<Oc.......<7.c.c...........!......{0R............F...m6.~...p..H.C....P....%Qaj.Y.4....rV.........K)..v].....pF5.l0lJ.F.i`.$KED.......j..'o.s.xi-...u.Z..L..Y...%r.H.E.....(....+..+.LT....@.(..@..Z&$../.....v.e...2.5R.;.JK$&)-.}{s.;.....?.3.6........Z..\.....O.C....,.z..\|...-.#.R._ZJ..<;0..C.\.p.F..k.r.....Uj..?..k.."0?.~...`F.^(.k.[...oP$.6~.5.Ya.....(.o.N/..<..5......s=..r...xa.8G.Wg...Zeb.Z...w.;..D....~."5..-l...0.z.F.,p...h........P$^..s.,.=..M?x.\|.[..[...0.s...Q..x._.Tl..Ej...S.......%I.,>.H....&.g<......Q?..I..W..O5.M\|.7.)\. .$.........J...O........_..>..;.....y.\t_....Zk...t.....2.....O....[...._(q.'..\|..Kt{....#g.....[.$.!e........~.....KOC..\...."........~..<I.Z.\|i...D.X........f.>....3..>.O./...n.;..)T....].-...b.......0k..b:....x.+.....k.U.f..".....U.+.........J..g.3.f9EtETZ.4q../....g.!.....][.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	downloaded
Size (bytes):	1507
Entropy (8bit):	5.443213363741287
Encrypted:	false
SSDEEP:	24:k1zC148wJDsJ7FSws+N2NSd69475z671MZidaFyDS+Cd7s1d/x7g7Dr1a:q2148wJD2xSw9uSg675xkdaWZCSXyDrs
MD5:	4C57ECB96C5476632179409B9F03CF51
SHA1:	15C40DF03FB98AA9942138CF352355A0F45706CE
SHA-256:	C202F8712629AEB943AA678DB96A66ACC5745C60985ED6A667ACE79DAACBD68E
SHA-512:	0B422711D6B32929608D883DCEA8246D8EB96D745A376EE0AF310688F31BA707F0F9B099E52445000895524F4395D4C6209430181DABDBB229B00630F354EE0C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.2m9rdWaS4Gs.O/am=MBg/d=0/rs=AMjVe6h3G7zmzsZZYBDDnQmsz-PK-2-isQ/m=sydl,sWGJ4b"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.q("sWGJ4b");.var ktc=function(a){this.Ba=_.n(a)};_.B(ktc,_.E);var ptc=function(a,b){b=b\|\|{};if(b=b.a$)switch(_.Ah(b,2)){case 1:a.Sa("MIaCgc");if(b=b==null?void 0:_.nL(b,1))a.open("div","fFsnHe"),a.Nb(ltc\|\|(ltc=["class","rRld8e"])),a.Lb(),a.Sa("lBL31d"),_.T7(a,{icon:164}),a.Ta(),a.close(),a.open("span","Pw1xR"),a.Nb(mtc\|\|(mtc=["class","FczIpc"])),a.Lb(),a.print(b),a.close();a.Ta();break;case 2:a.Sa("EXhbA");if(b=b==null?void 0:_.nL(b,1))a.open("div","QqNTyb"),a.Nb(ntc\|\|(ntc=["class","rRld8e"])),a.Lb(),a.Sa("m6mm9e"),_.T7(a,{icon:139}),a.Ta(),a.close(),a.open("span",."lJICRc"),a.Nb(otc\|\|(otc=["class","RHiWt"])),a.Lb(),a.print(b),a.close();a.Ta()}};ptc.De=_.lx;var ntc,otc,ltc,mtc;var U7=function(a){_.R.call(this,a.Na);this.j=a.service.Mb};_.B(U7,_.R);U7.ya=function(){return{service:{Mb:_.oC}}};U7.prototype.o=function(a){var b=a.data;a=b.type;var c=b.message;if(b.Hc)this.W().Va("XgsRcf"),this.W().Va("Jj6Lae

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	199537
Entropy (8bit):	4.705288692920627
Encrypted:	false
SSDEEP:	3072:ybBsNrYiYbRTdY2kfzYjEBtluJZ0+gwZC0IoAl8oDkDsDvU/J6/J9/JDJVQjj1P:y
MD5:	53BB04865802E54AC8AF8A4B671BFA1A
SHA1:	C330354F2BD383D4A86E0CEB9E93539457E09215
SHA-256:	42E25531F7AAC9B4400C3C6E9ED2FF0B60F2972C79553CD09293EFC17B2335AA
SHA-512:	BB951E8EEE524C84B2E939F93B96E7E4808FE3F0781F769134A2687B0D0F5C9177C26CB0DF1CB65063630A69A87A73862613B11AD61A73DB468DB56431F182B9
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/forms/qp_sprite214.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="26px" height="10682px" viewBox="0 0 26 10682" preserveAspectRatio="none"><g transform="translate(0,6738)"><path fill="#5F6368" d="M11 17h2v-4h4v-2h-4V7h-2v4H7v2h4Zm1 5q-2.075 0-3.9-.788-1.825-.787-3.175-2.137-1.35-1.35-2.137-3.175Q2 14.075 2 12t.788-3.9q.787-1.825 2.137-3.175 1.35-1.35 3.175-2.138Q9.925 2 12 2t3.9.787q1.825.788 3.175 2.138 1.35 1.35 2.137 3.175Q22 9.925 22 12t-.788 3.9q-.787 1.825-2.137 3.175-1.35 1.35-3.175 2.137Q14.075 22 12 22Zm0-2q3.35 0 5.675-2.325Q20 15.35 20 12q0-3.35-2.325-5.675Q15.35 4 12 4 8.65 4 6.325 6.325 4 8.65 4 12q0 3.35 2.325 5.675Q8.65 20 12 20Zm0-8Z"

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64792, version 1.0
Category:	downloaded
Size (bytes):	64792
Entropy (8bit):	7.995965227051492
Encrypted:	true
SSDEEP:	1536:uRjIIKORzkuW28lGsIUfTeeeR7HJ6tUf3:mI+wxvSDYqv
MD5:	4569BAFE1E55623A7464FD97303E5FDD
SHA1:	9A07C20C972FA29FCFED89DB7C09212B9B40F813
SHA-256:	1B3BF848AA10D3D17F6598C2AD844F11716B2090916759C4509393A1277DFE56
SHA-512:	A278080232FA696F9511F0E2F5864BF068E16BDBFC388CF84D53794696568995606AE2806D167F1F65F96399F257C15CF79276F934AA5B1E3F20E437684305B2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9aXo.woff2
Preview:	wOF2...............T..................................j..<.`?STATD..l..............2..n..6.$..X. ..>..h...[.....d..i.[..(..abv.hq.4o.....\+.u.M~.0........g..:..........I..w8..zo21..YJ.j..[@D.....U..I).E.b..4...B...VM.4P.\\|-.{Imo..F....#N....g.B.TI.tnZ4..!..q.. G..$<,..{...QT....#..sHm....y.r...tIHU.."b..O!..Kmh.b}~.u.......zeqTo1.)_g......z..._.y~....?...>.J..J..Q9....!...{.l\.q.V...^.,.4./..-nj.aj....1V+..D.t&...t74J.......V...........^.!(..8hA;}_K.^...\.%.pSI...C..Si........Ggae...Q+.L%%.<..@..!..q.A.....&L..)tl..>..'N.....n.R7.4So...IS~.X..,&y?!`._.>.....o...P...[./...._X.Y...#......{...b.h".!JL...../.D......S..;..kk....e..."D..%.J.(..;..j..BJ=.;9......`n..!1r..H.0..`.l,..L%J.JR..`..JX..2..fb.kc.c..Mg.hES..&m..\....S....H[(.e.6....L....g..1Q&......#.wR...DI.'......?.(...=.v..g..\|dj........Z.k..=.....a........02....N.k.r....p..w).......2D3..U.B".H.?.S...-z.:...(Km\r2N.......].....W..wb.(M.S...,X.w......g;q...J>.........R K........

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1477
Entropy (8bit):	5.437792107168178
Encrypted:	false
SSDEEP:	24:G9vCD7OYs/dPrWq/bF/RRD7OYs/dPrPfuO4D7OYs/dPrcQtJc+u/rD7OYs/dPrru:GUOL1jWqjFZVOL1jx+OL1jBJc+u7OL1W
MD5:	3941CD60FA643ED248F99441154F151E
SHA1:	9300D366354B80085699A5CAF72F625EB706A19E
SHA-256:	0A5A52ACCFFFAFFBACC3FC4F4515ED7B73049FC088786B9B74CCAC76F490DD5B
SHA-512:	53040F13547713C2049A4CBE7248F0956A5CBF6773821A1A4ECEFAF40D1696A5FDD1EC4E6DE7638E84E99AFE8091AC376542901B3B8C29FAB6F5347C522E8F85
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Product+Sans&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ latin-ext */.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 129848, version 1.0
Category:	downloaded
Size (bytes):	129848
Entropy (8bit):	7.998140890095368
Encrypted:	true
SSDEEP:	3072:5Pxah+PkeDK1M6rUtoWrUzhK3gBMNopGuvUpRx1sH:1gh+EM6omeWhKvNop9yRx16
MD5:	07987CC4A39B31CF6AFFFDE675F1D849
SHA1:	7ADA46987D0E1AAE2D3288272F8C97AABA4792E5
SHA-256:	DAE2E505F61E23A088E4FB91523643D2E0B816F29DB2BD57AFB3F56F00D080F3
SHA-512:	7AACFB569ADCA23716E0E3CA1D81073126DAFCAEFC33F4F43261A60F3F30BDF6FE0F1303BC8F038A2E55C574F6B59EBA85E7997F2A457B7E8D42D9ECA798FFEB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7dbR49_.woff2
Preview:	wOF2.......8.........................................8....`?STAT@.........\|.....P..6.$..L. ..v...n..[S...Sd{.....n.i.ID.D4..C.w..(I....1.`...\O]G.Z....z..I@.m.....1...........[X..n..&..W....4A...w.+..0..N.>...d!..;..^v\|S..z}..`(..h,.p.SN.(...1.q..5..sx8....X.r.C.!V.j......m..9....Q5&>..j#hZ.Z.1.i.I2.{..>....S'Q...h'..f:S./)....Onx.#b.....0g.....0.`(...X....x..%'........s.F...........pp.]/.PU!4..A\|/.t7a,.\|b..^b ?.]......J.x}.............)o........2...,o..0q.T...>q..y0..f.f.0.`.m..dCC.6A.{.;...bI....5..q.....-&.4.....7.8.4..q....4..is..q.1.z}...[....&......L...'..EP......B.^...~:.d.....vw7k....J....U.).4.F%\..0.......{..<.7.]..\|....2.Ko.<.}.g...".^..{.=...y......U?.?.(c.wX ...J..J..%...(p..3g.e'.^.!d.\aU......C..t.}...T.o.......X..0..Q.......li.R..E-.....f..e....:(...?@........>v.K. 7.]'.Z..5cV.k.#.<48......nXx.....w...bS">....../[.g..p.I..?UR5..k<.wc..G.2.......^..'3...E....fDU..;.f..-....S..?/...1.....T....kM4.......>g.L3..CT[.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47364, version 1.0
Category:	downloaded
Size (bytes):	47364
Entropy (8bit):	7.9944232758512355
Encrypted:	true
SSDEEP:	768:JXGmLkG8r2AzLYjh8URHJeHx85z4+Qn3BofJVBDwt6M//67Yxb3ds:AqkZ2AYzcxU41nRofJVBa66/6mbNs
MD5:	FCC676E93787A8D472AD00BF7F158D88
SHA1:	A28C8050BAA6E17C6ADEC60BCA582715403D500B
SHA-256:	1F6B8D8F7D462DC42D48B29E68062A707890AA2DD700C947806949F63D79694A
SHA-512:	887F1B666623249B995BF78562F87410D295619967C5146DBB5EFA01D6FA7C135D51D68F6A4C0A80A5B1EE1C0734713F6CA03605D2104BBA3AB991BC202AD3E6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vCJD.woff2
Preview:	wOF2...............$..................................f..l.`?STATD........D..K..t..6.$..d. ..P.....["...q.......d..s..?......<.Vv.j....S,a7..t..%j^......M.....m7.D.)C.o..7..)4.yF..mW.&v..Y..#s...1j.!..TG.{&O....P....-......Fq...D.......SQ.:^.P..P@.}...L..B...1!BN.<.....0_K....).U....}6..i.....eU.\3...WQ(c...m.Z.&.h.a.%.R......E..E.T2.T.&\|.uu..6m....R}t......]......x..8....}.....Kl..W]....<Y.....W&..]...w......^tU......s...S.g}......w.b........N11rQ.Q[cms.j..2u.....Jrf..%i......M.F.....S......bD`......t.h.l.....Z....@....d....9s.u!#)..hSa.X.....DVl...\|.....8.1N.fj...@........w.7.M.g.....0...7...T}.e.K..lod.y.e...P.r.j..@.%T..@....r{W..]..z........E....z.6...Vd........R0.@%rX.D.2.@.......g .....K#...\.D5.Mh.....h...p..!...=....r..8.!pv..V..X6.Lm.....H..tJ"TJ$..{h.t..I...o...Z.4.x..(...E=.H4.C$T.].x..U.w..eW40...h.........K.._.jy."..K[...K...5?.S.=..yVs.P8j....y.......%..h~g~%..(.V..(/S6..9....2...fr?V..Z.j..X..zY~...*... i,. .O.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1747)
Category:	downloaded
Size (bytes):	232919
Entropy (8bit):	5.60706241833948
Encrypted:	false
SSDEEP:	3072:3DC6mk1k95DXNBgIPeJJ6tSMV0AeI/f7cMef3XLdLJphIcN3G:MDNi9JktSK0AeIL2fL9HhIQ3G
MD5:	13B2A8889D47F57F9953B1C9172F815D
SHA1:	35ED7E2772AC331CA0A2A23254B708246C078B51
SHA-256:	D33F109122429D28782A91FE9F083F3CA39725A3DEEBC3465B2D1A0FEC0A35C9
SHA-512:	7A15811240CE5DC09B2782E7A6A3469C4B540120BAB1ADB00D0B38FFA3EB554A8EB84F958BD2302702B2FB8C3DF0D703AD977AEBE2986CC8C7F705ED067312D0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.2m9rdWaS4Gs.O/am=MBg/d=0/rs=AMjVe6h3G7zmzsZZYBDDnQmsz-PK-2-isQ/m=sy1h,vGOnYd,syi,syj,syh,IZT63,vfuNJf,MpJwZc,n73qwf,sya,ws9Tlc,sy5,sym,syl,syo,syc,syn,sy18,sy19,sy16,sy17,siKnQd,T8YtQb,sy1q,sy3t,sy3w,V3dDOb,sy4o,sy4r,sy91,sy90,sy4p,sy8y,OShpD,sy7h,sy93,sy95,sy97,sy94,sy96,sy8z,sy92,sy98,J8mJTc,gkf10d,j2YlP,syw,syr,syu,syv,syz,sy14,sye,sy13,cEt90b,KUM7Z,yxTchf,syb,syd,xQtZb,qddgKe,syt,syx,wR5FRb,pXdRYb,iFQyKf,syp,syk,syq,YNjGDd,sys,syy,PrPYRd,sy10,hc6Ubd,sy1c,SpsfSb,dIoSBb,sy4,sy1d,sy1f,sy1g,sy1e,sy1i,zbML3c,zr1jrb,EmZ2Bf,sy15,Uas9Hd,sy7b,sybg,WO9ee,sy1b,sy1p,sy3p,sy3q,sy1a,sy3r,sy3u,sy3v,A4UTCb,syc0,owcnme,UUJqVe,CP1oW,sy1r,KornIe,syf,NTMZac,mzzZzc,rCcCxc,CHCSlb,sy1m,sy45,sy46,sy42,sy43,sy44,sy47,pxq3x,sy3n,sy3o,O6y8ed,sy1,sy7r,sy9k,sy5r,sy9g,sy9j,sy9d,sy9e,sy9q,sy9r,sy9n,syaa,Sk9apb,sy9c,syda,sydc,syau,syde,sydf,sydg,sydh,Xhpexc,Q91hve,sy66,sy5v,sy64,sy65,syap,sy6n,sy9a,syak,syan,syaq,syar,syas,syat,syam,mRfQQ,syd0,sycz,CFa0o,szrus,sy41,VXdfxd,sy11,sy1k,sy1o,sy1l,sy1n,s39S4,wPRNsd,sy1s,sy7,sy6b,sy6c,sy1w,sy2w,sy6a,sy70,sy35,sy36,sy6w,syc3,sy8s,PVlQOd,NPKaK,sy2n,sy38,sy3g,sy3i,sy6s,syc1,syc2,sy8t,sy2l,sy2v,sy33,sy3j,sy3b,sy3d,sy3e,sy3f,sy6h,sy6m,BVgquf,syc5,sye1,syea,fmklff,sy49,ENNBBf,L1AAkb,QvB8bb"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.qr(_.Fx);.}catch(e){_._DumpException(e)}.try{._.q("vGOnYd");.var HQb=function(){this.type=1;this.view=null},PY=function(){_.Pt.call(this)};_.B(PY,_.Rt);PY.ya=_.Rt.ya;PY.prototype.j=function(){return _.bs()};PY.prototype.start=function(){return new HQb};PY.prototype.cancel=function(){};PY.prototype.render=function(){return _.cs()};_.St(_.nAa,PY);._.u();.}catch(e){_._DumpException(e)}.try{._.qIa=function(a){if(a==null)return a;if(typeof a==="string"){if(!a)return;a=+a}if(typeof a==="number")return Number.isFinite(a)?a>>>0:void 0};_.Oz=function(a){for(var b=[],c=0;c<arguments.length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=_.Oz.apply(null,_.iaa(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};_.rIa=function(a,b){var c={},d;for(d in a)b.call(void 0,a[d],d,a)&&(c[d]=a[d]);return c};._.Pz=function(a,b){b=_.qd(b);b!==void 0&&(a.href=b)};_.Qz=func

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	dropped
Size (bytes):	1507
Entropy (8bit):	5.443213363741287
Encrypted:	false
SSDEEP:	24:k1zC148wJDsJ7FSws+N2NSd69475z671MZidaFyDS+Cd7s1d/x7g7Dr1a:q2148wJD2xSw9uSg675xkdaWZCSXyDrs
MD5:	4C57ECB96C5476632179409B9F03CF51
SHA1:	15C40DF03FB98AA9942138CF352355A0F45706CE
SHA-256:	C202F8712629AEB943AA678DB96A66ACC5745C60985ED6A667ACE79DAACBD68E
SHA-512:	0B422711D6B32929608D883DCEA8246D8EB96D745A376EE0AF310688F31BA707F0F9B099E52445000895524F4395D4C6209430181DABDBB229B00630F354EE0C
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.q("sWGJ4b");.var ktc=function(a){this.Ba=_.n(a)};_.B(ktc,_.E);var ptc=function(a,b){b=b\|\|{};if(b=b.a$)switch(_.Ah(b,2)){case 1:a.Sa("MIaCgc");if(b=b==null?void 0:_.nL(b,1))a.open("div","fFsnHe"),a.Nb(ltc\|\|(ltc=["class","rRld8e"])),a.Lb(),a.Sa("lBL31d"),_.T7(a,{icon:164}),a.Ta(),a.close(),a.open("span","Pw1xR"),a.Nb(mtc\|\|(mtc=["class","FczIpc"])),a.Lb(),a.print(b),a.close();a.Ta();break;case 2:a.Sa("EXhbA");if(b=b==null?void 0:_.nL(b,1))a.open("div","QqNTyb"),a.Nb(ntc\|\|(ntc=["class","rRld8e"])),a.Lb(),a.Sa("m6mm9e"),_.T7(a,{icon:139}),a.Ta(),a.close(),a.open("span",."lJICRc"),a.Nb(otc\|\|(otc=["class","RHiWt"])),a.Lb(),a.print(b),a.close();a.Ta()}};ptc.De=_.lx;var ntc,otc,ltc,mtc;var U7=function(a){_.R.call(this,a.Na);this.j=a.service.Mb};_.B(U7,_.R);U7.ya=function(){return{service:{Mb:_.oC}}};U7.prototype.o=function(a){var b=a.data;a=b.type;var c=b.message;if(b.Hc)this.W().Va("XgsRcf"),this.W().Va("Jj6Lae

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35060, version 1.0
Category:	downloaded
Size (bytes):	35060
Entropy (8bit):	7.9934247518702914
Encrypted:	true
SSDEEP:	768:VWgzOJq8VMlI+d620JaSUhkJN1tLmkLqnEsKeeBClx7styedpa12:dSJBVMlfd6VJaSUCv1RmkavKetUXnZ
MD5:	0360DBC6E8C09DCE9183A1FD78F3BE2E
SHA1:	6CD4B65A94707AE941D78B12F082C968CB05EC92
SHA-256:	2DB6BC36808D43FA89029C652636E206FA3E889B35ECF71814AB85F8BA944AF3
SHA-512:	93C9F1856142DA0709F807CA3E5836065E61BC8160F9281FEC9244F31ED8AE8DF500CD5C64048AC59B4DBC36EBD18BA8E7FBCEEF58134DD76441079FAE147AB9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2..............u$..............................T....`..P.l..a.....D..;.."......6.$..@. ..,..6...[.]q..}:P..(....W.(........(;h 8..r.o...........k..........>..eZT\K.....4l..Z]...1B.1.G.....\|..p..._..S/...^I.e..l.=.I1...0..L./..D..Y{.w....(.....Q..J....v.........z......Q/.K..f._...-..T.f...[..U.).>.K35v...n.?-thr......w.?[D.u.Q.}..i_.cp..0E.R5m.>I.......x......H."C,....2...q...E..r.?...R../.J..m..X97...E.fJ...=.Q.>..`.QXuw..e."........\^.....~....>M.....h.Q.-.......SM,;W......#..#.B.....K.o...`...z...t....".$..s....o.v...w.I.mg.$n....../...N.....8H........^.~....X.Q.,YB.U...uX.e.o.l..o.2f..^_].~.3w........J$2)_.c8...&^.>...r.29.D&.I....T".H....O.2.$..r.\...1.}.ES~5...t.X`.x.gQk..e.L.N......{.6...4..G.....2.z...V...Vy.'..../.....'...z..i.G.......`...$@.k......1.....{PH.....qf......_...A.e..7.....C.?.^.....,......NDa<b..F...:.....+..\|.._I+.2.^......l...3..^.)qJ...0.....X.....yj....J"...lo..._j...Z...0...m..2.$.EBa.....w...\|..2&!.$..!S/^'.....r.U-.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.009629159026319
Encrypted:	false
SSDEEP:	12:Uc11FPrZO6ZRoT6pHAcF3a8xRjzrZ6ZmOHc9n+5cMK00k14enEPCedG:3FtOYsKB3xxzYmOOk4TfenEPCD
MD5:	1868068BDC2622CF2C4C607102970B6A
SHA1:	B254679B639C5D7F26BA8662A70E5D7587333ECD
SHA-256:	354AA87B02FCDDFAFEE3DB7BA65775E92D271256B7CE8DF3C0BB43467EBA7B3F
SHA-512:	A6C2CB698F7CA900EB1132C876CA70A5933EA4F201F4C6621C8F357A3DD916C8F9A834631C38436BAF83137903704D349917D9EA25B179AEE90262769F44A85F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons+Extended
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons Extended';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2) format('woff2');.}...material-icons-extended {. font-family: 'Material Icons Extended';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.399243567306305
Encrypted:	false
SSDEEP:	48:o7KCBeFDL2ybcB35jNQ8jseH5K6ZuweT7U7nOOJJIpnLECTv5ZTqp04eHEd5rw:o/NyQ5jOVaR2763qnLL7LOwM1w
MD5:	5314954C0F791BEB6375B3926DD3BE5F
SHA1:	D26FB1FF733DEC0BAECAC86E40F876E0F47FBB41
SHA-256:	1F987183F113F6D7AB2C2652CE1AC013704E707F4A40A38371A5E12B3ED16394
SHA-512:	B6C52A644B4B43643942E927ED18CD8DC40C210B905D2369392538972BC230965B5FBB53FD4EED9BBCE7F0C9C113477C328483BFDAA9ABD32CB2F6B634954EEE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.sDZsr5nc5jM.es5.O/ck=boq-identity.AccountsSignInUi.TsacbBOIW2M.L.B1.O/am=iBnMZLgGEBD_8DSgN6BIIOQAAAAAAAAAAIANAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHxDYKP0yzwkaS1YY34OOoTADxBIA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var $A=function(a){_.W.call(this,a.Ha)};_.K($A,_.W);$A.Ca=_.W.Ca;$A.prototype.RT=function(a){return _.ef(this,{Ya:{DU:_.bm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Li(function(e){window._wjdc=function(f){d(f);e($Ka(f,b,a))}}):$Ka(c,b,a)})};var $Ka=function(a,b,c){return(a=a&&a[c])?a:b.Ya.DU.RT(c)};.$A.prototype.aa=function(a,b){var c=_.osa(b).Wk;if(c.startsWith("$")){var d=_.gn.get(a);_.Oq[b]&&(d\|\|(d={},_.gn.set(a,d)),d[c]=_.Oq[b],delete _.Oq[b],_.Pq--);if(d)if(a=d[c])b=_.hf(a);else throw Error("Ub`"+b);else b=null}else b=null;return b};_.Yu(_.Yfa,$A);._.l();._.k("SNUn3");._.ZKa=new _.wf(_.Kg);._.l();._.k("RMhBfe");.var aLa=function(a){var b=_.Nq(a);return b?new _.Li(function(c,d){var e=function(){b=_.Nq(a);var f=_.ega(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 53884, version 1.0
Category:	downloaded
Size (bytes):	53884
Entropy (8bit):	7.995657719654049
Encrypted:	true
SSDEEP:	1536:e2ESZvfEEuCnkbGrXul6qhJi7nvl3xM3WxNXfA:e2ESZvfE1CkGald8rlhMmxZA
MD5:	11E65682C5D363ECD17CDD1CE3615418
SHA1:	89CC3F37B6EBE724BC22045AEA74EF2BC6932DA1
SHA-256:	41A98AC11A50E26C91A33CD44D8FF75B7F5963B33CB63AF48099EA48D0BF5E9A
SHA-512:	6E6FDA35E1356D13C0B936C815B9ECEDE941DAF4B853ABDD721C2737B80A6155DB47BF908615374C0FBDBDB8E75DE69D18776BB4C051774DB06BDF2F5A5DF29D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu52xK.woff2
Preview:	wOF2.......\|.......D..............................j...j..j.`....R..<.....d.....Z...x.6.$..0. .... ..D[..q...WF2n.....e..T.6.e...n......m:B..p[........,.P.....4"J..,M.u....!Z..(...1gh..E.N...[.-$.R..a..g]b.\|Lw.bp...(....r.:K4..w.L!.c..$.m..#.E~...2w...^n....{.A.^]..B......j.e....u..._(6)T.h....i7t7q`.).=....:K.bA.r..T.T{g.U...:!a.2..B\........Re..a.y...TC3.....3..2?.o.._B.._E..6yE.+>...$.[..!I.....E...0W9e.$...$.l.:.n...P:b/.<C.....ynr..D..,..Q(PU;U...n..U.........o%.....ZP.6j....&..a...O.....0...0.H3.P....m.3...J..8...."..H.Z..u.......P.Tl.[K....k..$..?'..ok.I...w...@#...[.>o.wWCu.#.7o>.....p?.e.K........I.?....jD{..r......X.Sg..L.....Q ..Q.S1.0z...9.>sk.}.y.^.S=.=.T.q.Z.YE.O... $.... Z[....>L!(X..N...,..@c...&s..S5.[....Fm.b.S.6....@...dRm.N.s!..}.b.f.=.OI....rJo.....DMu..l.M..YU.L..5.:....f.q.c..Y{.TV.ez.HeX<....Y.....]."F.M..h......MV...u.?.&.....IJ+.....;.v......CF\|.6.Z...L(.3~....&. .G....Y.!......'..L...]9u..s.F........!.qC......{Q/cw.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4280, version 1.0
Category:	downloaded
Size (bytes):	4280
Entropy (8bit):	7.938204175548688
Encrypted:	false
SSDEEP:	96:Tt2MC9hRyCoDgukpdZAfYeNXx6EU+jtckAh/G44MBUAgcD/o:u9v6g9ZAfYeRUutckAh/G44MBUAB8
MD5:	35F2221688A86314A271F11BBF8E76BD
SHA1:	2E56E5FCCE211EEA8CA3709E0A8B33DD89CEDA92
SHA-256:	3C1D1B09AF9EA0E4A497CF8F1BAAF915BB032ECA2AE369869566282D156CB25D
SHA-512:	188B20E8E1D6C3759B5427A6EA56AB9AD509DDC7A8F6480B6C8E55CD742E26E15D5804B0B518D62226361DDA70AB02C5B2D302D7259F7D521617DC245F2D52FB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIOpYQ.woff2
Preview:	wOF2.............. h...Y.........................2..f..j.`?STAT..l....x.d.0..6.$.Z. ..~..G.....#......>...L..Y=.......h..mv..t..z........}...If....?7.I........2.....C....fR."O....~.{.-..R...E.n.&c0d.]S...m.4.f..\.Z.]....5....KA?.&(8...:r...........z&..\|...mk.&.H..H.T.x9./.'50........0..(\...1;.4o.v....W.$$.0..TY.B..V.Y.j...!....r....V...e...~.1..,.....J1..`K}......`. ....P 6Cj...e.f......U..... ..P.;...5W.....2PS@X.+.1k&..88>9..H.H.o./.W.a..F...~.._..t.{../.(...7.......5...5Z.\.T$.:...'.!.=.=.DJ.........F..1....@6.?>..;;.....L..s..A.wq..B..:2....+9...KT..Dt.a.+/...v..P......v[h.j$.rA.d@TB..B.&.)!.I.n.w.._t.w!...[.&.N..a....HL.z.Y.....t.F<0..`....2i..L"....+<.h$....... p...).i..+!..5...+=j..=h..mm.,....o~.u6.Iy.5SQ.....e<..aI....n..&..[..s@.Z.......-.l..J6...=.'>.9..8.&............;n..#.1..8....L.......A.3.....z8L.A.>...c,....z....k.*&.$;.;.QSkA..m...!4. .@V Q...eX..... hh..b..H....?...k.Yf.......;(..(.`/@....9.I@.2.....Q......i^.[I.wa...D..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.399243567306305
Encrypted:	false
SSDEEP:	48:o7KCBeFDL2ybcB35jNQ8jseH5K6ZuweT7U7nOOJJIpnLECTv5ZTqp04eHEd5rw:o/NyQ5jOVaR2763qnLL7LOwM1w
MD5:	5314954C0F791BEB6375B3926DD3BE5F
SHA1:	D26FB1FF733DEC0BAECAC86E40F876E0F47FBB41
SHA-256:	1F987183F113F6D7AB2C2652CE1AC013704E707F4A40A38371A5E12B3ED16394
SHA-512:	B6C52A644B4B43643942E927ED18CD8DC40C210B905D2369392538972BC230965B5FBB53FD4EED9BBCE7F0C9C113477C328483BFDAA9ABD32CB2F6B634954EEE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var $A=function(a){_.W.call(this,a.Ha)};_.K($A,_.W);$A.Ca=_.W.Ca;$A.prototype.RT=function(a){return _.ef(this,{Ya:{DU:_.bm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Li(function(e){window._wjdc=function(f){d(f);e($Ka(f,b,a))}}):$Ka(c,b,a)})};var $Ka=function(a,b,c){return(a=a&&a[c])?a:b.Ya.DU.RT(c)};.$A.prototype.aa=function(a,b){var c=_.osa(b).Wk;if(c.startsWith("$")){var d=_.gn.get(a);_.Oq[b]&&(d\|\|(d={},_.gn.set(a,d)),d[c]=_.Oq[b],delete _.Oq[b],_.Pq--);if(d)if(a=d[c])b=_.hf(a);else throw Error("Ub`"+b);else b=null}else b=null;return b};_.Yu(_.Yfa,$A);._.l();._.k("SNUn3");._.ZKa=new _.wf(_.Kg);._.l();._.k("RMhBfe");.var aLa=function(a){var b=_.Nq(a);return b?new _.Li(function(c,d){var e=function(){b=_.Nq(a);var f=_.ega(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105776, version 1.0
Category:	downloaded
Size (bytes):	105776
Entropy (8bit):	7.997698577634301
Encrypted:	true
SSDEEP:	1536:97gkIV3kNCPB6vwmOqaGQKpLEM93CVA0l5p/BGrNITrG3pI+fl5N5D10:97gX3JPBVmOq+x1BGr2KZI+vN5D10
MD5:	DF1878BEEF6F76B3B8B9C3A479BFA5CB
SHA1:	5724CF8D410C6BD487A002A14386231C29C933C6
SHA-256:	C7B73DC2A43D6620B4AE7B1E05EEA2342CF309352B4DCAADEB4491C5B72468E5
SHA-512:	C5B1B9312EF7111D95C07C863E19EF731155109AA5FDB451ECE9B509884146CEEBDA3B314F42A917230F81823FF8ABC89A70BF9719DCBA34BF327C2678A1C544
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6SIc.woff2
Preview:	wOF2.......0.......T..............................<...X..2.`?STAT..P........Q.....6.$.... ..f.....[..r.fW.qt'..Z...E.Ds.~.........[..k.G.VR.I.......$...-<...........9.{..........EY.J.[MhHo=jkJuS..'...#...Q..-.dQ#,.aN...`E>},.N..n.%ShTI.T..SP...6.7SI.....K.E..6..J3.Bp.I..\|.c....&<.eM.......z..W/.V..%.GJ..%lOQD...Cq..e...p`C....z.~..n6%......\|/N(..,_....J.F.C.#C~..._e........3...[`(..@....2-[.q..\|........./...:....#Z.(..P..P.F...0jVnb..;...t...m.....`.....$F..@D...#...2..H.....%HJ..6"_.D.0Ds.m.5.5..Z]....F.....,"..H..#.1.....!.qO?3{d.......Jw%P.>..........s.o3.f.x.t...4.+fyLB...p.\|.]..++..gv ..t`...&s.C@=ID.Vcm..^..... .,Aw`.4.N....]...p...#.1.ak.R[H....{e...\|?'.........!.D....Be?...zEEA1...$:......?..ni.\.6..6qFg..Y..}>a0.~.F.PK...j....%.W.>.R...W.?.e.VrE#..[ ...H.U.l9.l).....Q........['....r.......w.n#.,sR.!Tbi......_..l.J...7....Hc..........@;..t.T.Zu.Z...b..^.?T.T.....4...#@&....L.n.A....=x.........}..]....3.0I.L...=..)......*Z..j,...."...

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42296, version 1.0
Category:	downloaded
Size (bytes):	42296
Entropy (8bit):	7.993503490899671
Encrypted:	true
SSDEEP:	768:IS4cNuQDLlcxmEyKRCyplk50W1AcLgmYVii3ZAv6MwHZtFqXeqRstTBVredGm+IX:IS/UQDqvyQq5j1AckQiaCMeXFtTH2SiV
MD5:	20A5ED564FE91199A53645DD2A8F8BCE
SHA1:	878AB8E8E2A0BBDE4F47359D625DB2B81F7AC0A1
SHA-256:	3109801208D4C4B75FF98BB721D0AEE286293C2F0D2F47F778DCFAD779E9F5EE
SHA-512:	A4195F0BAE426F2886058FC84630D3D6DAA855D8AE86FDD558858D19A2F2EBD0BA4515826827BAB85225D36CA53DCBBB8AFAE88F100B5793F70F1CE4B3E3C6A5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvUDV.woff2
Preview:	wOF2.......8.......(..............................X......,.`?STATH..t.....`.....j..6.$..P. ..x..U..[..AU...W....`@......h...7~......:.&.v.[a......R.............d...;...].!...A...Z...BdnQ.$E.E.$.T.&..0...{.......L.km..1...1^MK........Q.$So....9.^_M.Ky......V-..N.tN;D..Qy.D.h.&......Ew........N7.2.K...p.:{..O.F.#...1d5...9..4...2.0Gt"l...^=.=x.RY...t=......8.u&...T...ePT>..3..k..Y-B....:.M..C..p..t._..Q......^.L........{9..n...WW...._.C.vm.X.;z.....,.:Q.`....q......O.+ .5dp"<.y..,.:..rp.@.r.z({.Y.R..d.......[.....w?.Q":(..@.........;..m......A..r{.rQU...<...,.'.j.S.}..s.n6U..Kt..S{i.yVI^d..(...Gi.M..R.N......sQ.J.Vh....]...B.%.......3 ...B\|.......#......}]..M..G...#.I>....s.s...6..c..'...%-,..;>..P.haDMP.+"....b...rT.h.8...yg%....<c..}.xrm...IT...T.d..yH...Oco.........4...I%.6.HSK.-5."C.@1.b2lc...e.:&l.........=Tl........F!&[...bm.M........@E.,.<+.....X!$WV2....L..B.u"....dc.>.Z).@..YJdp..+7R.@....Q.P..P....@..SW.9M..i.......~......yC.*$.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1420, version 1.0
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.723110473429003
Encrypted:	false
SSDEEP:	24:PIOJL9JTXY3oLB09sXzsG2PGl589W5VCBMSVtR+dSGwf6UJ93ciyuJL:PIOJLTXeMK2s1el5b5VLKtR+8zfxZci3
MD5:	F8FB2BDE26ED2B7A60BA773D42DD2150
SHA1:	70871B9E74126289901A00F44B8271849A125DBD
SHA-256:	9DAA921A21820750F7FE6223AC35072394F99209C374409981F6EFD1B2E3DCD5
SHA-512:	B397932A81E81F76E31E85731A92CF468EE523E89313DA0D78A1513F7CD48C8D5BAAC83C3E02BACBEE45C9CBFDDE8D69BE0D1B6DC584C67624DAC1F027942CE1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJHkq0.woff2
Preview:	wOF2...............`...1............................F...`?STATH.d....D.m....6.$.$. ..h.H..._.(.....5.$a..3.\|...7......B.7.BT.4...5..:D.k6......4.G....D...8.3.W..+..e",f!.(.RL..K4.$..B.TB{.2b!1d.I...[.9...;..j..F8!...... .......H419...O.....0....@...].. \V..1...$..)&..0<.....x.......Ls.\|.......$.1...%`@..."..i6...;.\...]...$.!.. -..Q..T.?.....h.'?.........l$.<0...{........(.4....-..R...A.$.oK...@.0.(!d4.#.@.0...B..\...~=N&.nj{.5......MjBq.......S2..@..7....e......J.....<..Rj.......J......u.5.)...mr.K6-.iQ\[8y2...{......ft....e...O.2.QZ.N..f`.....D...g..+K.]"..S..l?..^$...]J".sw./<l6a.t......s.....:.y.Z..;.x....R.1...d`......y..:..oi...Iv.\|[..../.G..4.i..J'..v..?.-.M^..\i...n.".d.I.L..9xt....R.%K........>}}^..";.C.'\|.n.j..L......[...b..m..j}U.'...w..XI..,...G....{X...!3o...j.R..q.w.bO99...Zm..c.J.'Q9.....i......mJ..aG.....'Jd.:.J..S.mXaN)jV..7gk..q..s....T.....5.B....{c...9q...............Q.5.. /..!.........h...$..'..>.......X..0.cbm..f.'......8..R

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 49980, version 1.0
Category:	downloaded
Size (bytes):	49980
Entropy (8bit):	7.996799215294005
Encrypted:	true
SSDEEP:	768:4NDq0SoQR6dpJ1vmaM6qe0DxytWLtO20RlJ0G9dPPlBeeeWsx9HiKdfbZ2g3A:SoR6d/BmaFq/LEPiM3+HPx9CKqwA
MD5:	7B69C53249D749F80F5AC911A9F6A416
SHA1:	D6283C043883942BFB577D0F7F2477DB7C7B10B2
SHA-256:	AF6B37D5CEC7927D3BDFBCD8C75D7BF80C29C583D71B75ADE321EF706A10BE32
SHA-512:	F191626E8DF898011470510827C91750C64463BB7A739243A4AF205E0AE76F8EEB98C9BBD4C2B46484864F35BBF318E748EF6D1DBEBD71A3D9E5EA8C585787CA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlvBg.woff2
Preview:	wOF2.......<......................................j...L..j.`....H..<........4..Z...x.6.$..0. ..~. ..)[....d.z..WP.!@.g..L~.jds...nCj3.I...........)....oH&qX..I..`][mO..A...D...#.9.Y..."BxD0..u."..$w.}.B......=.O$....<.p_cBd...xn.9h/.d..a....3:d....S}......M1....... ...03PP'W7.$%...,K.<.l]OAT...H.T.Y.m...V.&......>...\|`\|.f..._G.?._. .#p......L.N.fg.C&...;..s.1D.5....<:...9../F..#..x.o..v.F...l.....)Ie.~...w.+..1..QY.?.x..BT.L-..c..z'\|`.;D-H.E..h..K.b..}j.....<.8......C.$U.7..j.XX"....D.P.Y..........F...%#t..rD....@...FR....%T...`.~Q..H.J.E1.z..r6Q:.... ^.......}.5...6y[...0ID.&..5DB.R..m.h...u........m.Z..VP..BW....Ku.].(.........B....N.`.....gr.=.\..E..$.S.>.xmP........... .....9......p!.GtC;..a.zF\.....;.^i\T..7k...[.M)..........X.p..k.}.CT.T.*.....=h..7@..].....{..aa&2.g..pO..p3..Y.AV8X1....T....L..<.....@..9..1..k...k.....h...b^...^.0=..b"z.c.bi6.T.....L5:...s:n.)...Q.IG..'...#..yM..ey....V.......@zk............h.].7......^d.Q.X...n..`

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15447
Entropy (8bit):	1.7278338539839808
Encrypted:	false
SSDEEP:	48:b/68u+k29W8sEvlxN+Y9Ml6BCj1L81/L8C+sc5IY7J9FPm:bSGkEWRQxNXesc5lFe
MD5:	8DF19EC399BE913884590015105AA584
SHA1:	5502576575AFF37A626934FA655C124291C58AD6
SHA-256:	D48A0F5A08249E1768C06ACA31C16D50D1216434E1C91BA322CF5521577A59E3
SHA-512:	89D09ED10A4E440A423443586F111E247C3BFB1BE58AEFC3E62586354EF21F0CCF66619F54F6BC06CD81DD81C57B60DFB3D052C37AE8DC0E972963B67B3380C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs...............;.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-08-12T10:01:56-04:00</xmp:CreateDate>. <xmp:ModifyDate>2015-08-18T09:59:41-04:00</xmp:ModifyDate>. <xmp

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44980, version 1.0
Category:	downloaded
Size (bytes):	44980
Entropy (8bit):	7.994798586860677
Encrypted:	true
SSDEEP:	768:bsAmH++kJwbmKlSq79G/siQusuXt6zp9tDWW8jVMbfIvTvrqk+61+hpd5USy/EF1:bsr++mwJlSq790lQLud6zp9tt8jVMcvm
MD5:	A32CAE41AA72AD6CA75FF8B5A7A11606
SHA1:	FC29CA3935D5F85C169448D7CC6410C2560D92BC
SHA-256:	33EA7445E374A6AAB69F4E13DDBC9FC0E356C731E2D1F093619B93D4281BBE2E
SHA-512:	CC5EA4383668E7E20CCC76EF91551C967371781BB7A09947B7B2C55916A9282219A15AB11D747D9774D91C51DC2E379E7CC8D25C8CFDAEFFB1E4B4224F486228
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXA3jw.woff2
Preview:	wOF2...................N..........................$...x..4.`?STATD.......P..V..6..6.$..^. ........[......./...H.!..VK..m.`n-..6.l/ ...N.v..../_...........](.IZ.....S....=.&..MH.NsP[.-H\|.c.y.....6.N....U.....Y\|n......~Tz..S.uK..vG"....F.........F)^.7S.;=d.....c<.s....b...m.4X.T.l.....Uf..{......;......O,....~...x#a.=..f...4...s.3.R$.)sg..2;m.I......G@.@PP...3.!u..de@.La}.....nJ.H....F.N...3j..S...~...z`..JtS...+..:....h.......^LR.0.^R..o..ODI,..$G....M...G.!.n?o.Y,..B....u$.q%$_X$..$.t..._....h..ulK..q.>w...^w..&\..NU..CR.gI$.E'6F .?`w.N.l..o..\|....{.{.r..F."V`,.....u........7]..E...\|......J.4.&m#"m..MSOR7Z....>...cl01L..6&.l...@@B.I....[.uz.....vM.ejY.es...4.l...n....,.....2.*..@..UZy.p..i?..o.-.n......s.?..t.............D>P1jS.....q9Tu..zD......:....f.8. ...d..,X.E^.%....}......L.x.L.I$.b........'l.(L...)..I.c.p=.....+61&l.}qEe...p.....x.c...a[..j1../`...N.!..O!....7E;P.~..-x(...D%^+h.xH4J.y..wO/u..`.2Y2..%.so.Y.y+x.w..d...qkk.De..`.$..7...

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 54212, version 1.0
Category:	downloaded
Size (bytes):	54212
Entropy (8bit):	7.996118207813738
Encrypted:	true
SSDEEP:	1536:8sEB4tJYg9vMHihmW3kiesSO/Iy/EEbOPK:8sE0JSCsWZesSaIsnOS
MD5:	DFA374BE8A198433A11856E9967E96F9
SHA1:	9E8D11BA6270CCB1254686C0F24A05F21D33A661
SHA-256:	0BC130FEA6C21498BF358680BE297533AF347EBCDBC18576629FF1D89F8638F7
SHA-512:	C18730EE5A9E1BC97E441726D74FEA87222F9AC0CDA4B02C7EAAA97A4F1319BBBBB7B5257037AB3687AB8345FD1E73F933005875A538087A84EE447F2F103E8B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBhc4.woff2
Preview:	wOF2...................^..........................j...L..j.`....J..<.....@..Y..Z...x.6.$..0. ..&. ...[..q....iX.e.....ySkC...........1....I..(....~R..r.v......U.\"9<..(CT.Y..2R.>%<U..a...w..1.K.B..w....}....dJ..n..OI.)..9"2.i0w.N.w~....&...A.U<$(.%.I..#HX"....;>7s-.v^0.1 ..."......#./...K\7.s..dJ.d..q.p..tq.\|....E........'.3.n.2.lw..&....^8.)3.B.q_...HUV.h]v.....~. ..2..[.F..+O.$...~un.......+n........s.{......"...Ed..C.0.R.....`Tl.Fm......?.....#Z....'.#G.........0..F...........`...].'^................2~.~...........=r..=......O.........,..RZPB@T.(.6(..X.........{_.C&$.e,..$.e1.....8..xg.....\|,/.].......`)....4....w+..h...?..........5.F?.....V.b...../...?.r...w..J....LZ..!..Y$.a^~s.B.^..Hi&..&....6...D.{;UY'..(5I..,U. .`.n..."..F..d.+.....o.`vX.y../........w.6..%..B.1....Z~...g.{zb....M.1 ;+QW.B...O.....;.e...3.j......ts*..AjA...r..1.,..G. s.t.95{w<..}.........=3.4..f..>.8.I..$..g.9..>...r..B...% ....4...%x.h].2......!.m[......

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 21:18:27.739784002 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 21:18:30.078890085 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.078953981 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:30.079026937 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.079332113 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.079376936 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:30.079423904 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.079571009 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.079586983 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:30.079718113 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:30.079729080 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.304804087 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.305138111 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.305182934 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.306916952 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.306982994 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.307985067 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.308079958 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.308238029 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.308249950 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.350433111 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.388223886 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.388479948 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.388495922 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.390100002 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.390170097 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.390491009 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.390566111 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.443344116 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.443375111 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.490832090 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.828866959 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.829207897 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.829271078 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.831279993 CET	49735	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:18:31.831321955 CET	443	49735	199.36.158.100	192.168.2.4
Nov 20, 2024 21:18:31.974961996 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:31.975013018 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:31.975086927 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:31.975327969 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:31.975354910 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:32.960189104 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:32.960246086 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:32.960309982 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:32.960773945 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:32.960789919 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:33.329274893 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:33.329381943 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:33.329456091 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:33.331948042 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:33.331979036 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:33.773384094 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.773773909 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:33.773839951 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.775196075 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.775289059 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:33.777967930 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.778033972 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:33.778949976 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:33.779042959 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.779170036 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:33.779186964 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:33.820557117 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:34.778078079 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:34.778331041 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:34.778363943 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:34.780107021 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:34.780169964 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:34.781184912 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:34.781272888 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:34.784538031 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:34.784641981 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:34.789609909 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:34.789634943 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:34.790035963 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:34.827820063 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:34.835191965 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:34.835226059 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:34.871368885 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:34.882334948 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:35.031698942 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.031766891 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.045809031 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.045869112 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.058418036 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.058475971 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.076072931 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.076131105 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.217873096 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.217981100 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.245748997 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.245847940 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.253289938 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.253361940 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.264117956 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.264185905 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.272586107 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.272921085 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.273006916 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.273039103 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.280909061 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.281099081 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.281116962 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.292551994 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.292609930 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.292625904 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.306194067 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.306251049 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.306273937 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.318537951 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.318620920 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.318638086 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.328313112 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:35.328469038 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:35.328500032 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.328540087 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.328557968 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.328609943 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:35.330868959 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.330943108 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.330960035 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.343640089 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.343698025 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.343713999 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.356245041 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.356313944 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.356336117 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.368537903 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.368608952 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.368617058 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.371006012 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.371042013 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:35.371110916 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.371390104 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.371403933 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:35.413290977 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.413311958 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.452673912 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.452748060 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.452766895 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.454839945 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.454900026 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.454916000 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.463628054 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.463669062 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.463695049 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.463716984 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.463840961 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.468041897 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.472290039 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.472351074 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.472364902 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.475220919 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.475301981 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.475330114 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.477745056 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:35.477797031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:35.478095055 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:35.478188992 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.478298903 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:35.478305101 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.478316069 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:35.478331089 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.481161118 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.481213093 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.481228113 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.481461048 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.481518030 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.481559992 CET	49739	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:35.481590033 CET	443	49739	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:35.631943941 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:35.632004023 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:36.915371895 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:36.915482998 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:36.916780949 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:36.916789055 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:36.917927980 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:36.919127941 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:36.963345051 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:37.453607082 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.482089043 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:37.482299089 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:37.482368946 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:37.506676912 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.517891884 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.517906904 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.519484997 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.519520998 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.519551039 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.519565105 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.519630909 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.519637108 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.519690037 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.522303104 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.528748035 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.528918982 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.528925896 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.529000044 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.529139996 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:37.529164076 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:37.529175043 CET	49746	443	192.168.2.4	184.28.90.27
Nov 20, 2024 21:18:37.529181004 CET	443	49746	184.28.90.27	192.168.2.4
Nov 20, 2024 21:18:37.570403099 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:37.570449114 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:37.616878986 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.704230070 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.707915068 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.707979918 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.708013058 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.719505072 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.719558954 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.719568014 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.729348898 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.729403973 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.729412079 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.741641045 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.741707087 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.741715908 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.755218029 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.755292892 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.755302906 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.764975071 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.765029907 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.765042067 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.816431046 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.828850031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.833076954 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.833151102 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.833170891 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.833205938 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.833250999 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.906482935 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.910864115 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.910917997 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.910947084 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.921689987 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.921745062 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.921761036 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.931411982 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.931466103 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.931493044 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.941097975 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.941148996 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.941171885 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.950979948 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.951025009 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.951049089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.964685917 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.964756012 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.964778900 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.978199959 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.978247881 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.978270054 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.992132902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:38.992187023 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:38.992211103 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.005300045 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.005367994 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.005377054 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.018862009 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.018903971 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.018913031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.032522917 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.032557964 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.032589912 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.032599926 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.032639027 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.043591022 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.055716991 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.055778980 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.055788994 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.076457977 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.076502085 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.076510906 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.080507994 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.080559969 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.080566883 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.105937004 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.106003046 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.106013060 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.108277082 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.108325005 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.108331919 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.112773895 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.112823963 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.112832069 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.119373083 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.119451046 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.119452000 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.119482040 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.119524956 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.124629021 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.129676104 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.129731894 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.129740000 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.135010004 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.135066032 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.135076046 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.144382000 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.144440889 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.144448996 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.149801970 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.149851084 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.149858952 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.157591105 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.157646894 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.157659054 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.164896011 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.164987087 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.165003061 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.172542095 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.172609091 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.172620058 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.174525976 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.174582958 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.174592018 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.181257963 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.181308031 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.181315899 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.190198898 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.190248966 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.190283060 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.196449995 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.196510077 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.196536064 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.203802109 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.203877926 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.203902006 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.211256981 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.211323023 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.211349010 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.221482992 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.221560001 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.221581936 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.234808922 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.234865904 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.234879971 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.245395899 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.245451927 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.245462894 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.248286963 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.248342991 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.248352051 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.258176088 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.258234978 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.258258104 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.260917902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.260967016 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.260983944 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.277509928 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.277566910 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.277592897 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.280941010 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.280992985 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.281002998 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.281924009 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.281986952 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.281995058 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.284307003 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.284377098 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.284385920 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.307538986 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.307593107 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.307624102 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.308525085 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.308588982 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.308602095 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.310636997 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.310698986 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.310707092 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.314733028 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.314812899 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.314862967 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.314872026 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.314910889 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.316862106 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.318964005 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.319061995 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.319067955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.319097042 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.319147110 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.320976019 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.322880030 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.322937012 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.322945118 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.324870110 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.324925900 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.324934006 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.327022076 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.327090979 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.327097893 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.329588890 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.329668999 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.329678059 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.333844900 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.333892107 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.333899021 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.335882902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.335958004 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.335964918 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.337086916 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.337140083 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.337145090 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.344228983 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.344286919 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.344294071 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.345386982 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.345447063 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.345453978 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.350864887 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.350945950 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.350951910 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.352466106 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.352530003 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.352535963 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.358381987 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.358438015 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.358445883 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.359659910 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.359694004 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.359707117 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.359714031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.359750986 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.366049051 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.367075920 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.367158890 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.367163897 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.373665094 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.373712063 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.373713017 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.373727083 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.373778105 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.374782085 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.381217003 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.381294966 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.381349087 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.381356955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.381397009 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.382172108 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.388434887 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.388503075 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.388535976 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.389319897 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.389383078 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.389394999 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.396089077 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.396169901 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.396189928 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.396944046 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.397003889 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.397017002 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.404007912 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.404067993 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.404086113 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.404865980 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.404927969 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.404937983 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.411115885 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.411190987 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.411211014 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.411909103 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.411958933 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.411966085 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.435127974 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.435193062 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.435213089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.435239077 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.435297012 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.435833931 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.437618971 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.437798977 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.437810898 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.439413071 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.439464092 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.439471006 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.445972919 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.446093082 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.446136951 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.446161985 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.446202993 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.446624994 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.448395014 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.448452950 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.448468924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.457930088 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.457988977 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.457997084 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.458017111 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.458159924 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.458666086 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.460793972 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.460853100 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.460906982 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.460915089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.460953951 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.478600979 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.479207993 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.479270935 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.479294062 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.480431080 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.480525017 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.480532885 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.508392096 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.508447886 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.508470058 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.508485079 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.509129047 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.509186029 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.509191990 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.509228945 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.510166883 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.511390924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.512454987 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.512515068 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.512523890 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.512564898 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.512568951 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.513595104 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.513644934 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.513650894 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.515630960 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.515664101 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.515707970 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.515716076 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.515753984 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.516802073 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.517987013 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.518037081 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.518043041 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.521943092 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.522094965 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.522154093 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.522176027 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.522214890 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.522586107 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.523741007 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.523829937 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.523850918 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.529481888 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.529697895 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.529721022 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.530839920 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.530915022 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.530966997 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.530981064 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.531019926 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.531999111 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.545253038 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.545308113 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.545331001 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.545677900 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.545794010 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.545800924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.546766043 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.546813011 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.546818972 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.553242922 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.553287983 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.553292990 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.554490089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.554533958 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.554590940 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.554596901 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.554658890 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.555445910 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.567482948 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.567540884 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.567548037 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.567786932 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.568188906 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.568195105 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.568758011 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.568802118 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.568806887 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.575336933 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.575417995 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.575436115 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.575761080 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.575808048 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.575814009 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.577625990 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.577696085 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.577702045 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.589850903 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.589904070 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.589911938 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.590846062 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.590925932 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.590933084 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.591859102 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.591907978 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.591922998 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.599185944 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.599246979 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.599270105 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.599677086 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.600708008 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.600790024 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.600806952 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.600864887 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.601552010 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.612364054 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.612451077 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.612471104 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.613014936 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.613066912 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.613078117 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.613944054 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.614258051 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.614268064 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.622925043 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.623169899 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.623239994 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.623261929 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.623323917 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.624155998 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.625020981 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.626260996 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.626276016 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.650147915 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.650278091 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.650309086 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.651510954 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.651838064 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.651870012 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.651923895 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.651932001 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.651985884 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.660252094 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.660324097 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.660377979 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.660387039 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.660429001 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.661231041 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.662226915 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.666264057 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.666270971 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.680305004 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.680347919 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.680418015 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.680425882 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.680468082 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.681235075 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.682275057 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.682344913 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.682351112 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.710203886 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.710285902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.710345030 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.710352898 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.710393906 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.711328030 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.712198019 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.712239027 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.712260008 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.712268114 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.712573051 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.713176966 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.714467049 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.714523077 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.714529037 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717196941 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717257023 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.717262030 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717782974 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717844963 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717914104 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.717920065 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.717973948 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.718667984 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723442078 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723496914 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.723503113 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723887920 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723925114 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723954916 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.723959923 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.723999977 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.724781990 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.730746031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.730788946 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.730803967 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.730812073 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.731081009 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.731441975 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.732403040 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.732472897 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.732476950 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.746592999 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.746642113 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.746648073 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.747006893 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.747056007 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.747061014 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.748061895 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.748111963 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.748116970 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.754478931 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.754532099 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.754537106 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.754934072 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.754982948 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.754987955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.756251097 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.756345034 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.756397009 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.756402969 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.756725073 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.768764019 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.769068003 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.769115925 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.769136906 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.770149946 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.770257950 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.770272970 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.776472092 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.776525974 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.776546955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.777051926 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.777097940 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.777107954 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.778039932 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.778104067 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.778117895 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.791476011 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.791522026 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.791598082 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.791620970 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.791687012 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.792087078 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.793205976 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.793260098 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.793266058 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.800757885 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.800810099 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.800816059 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.801244020 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.801295042 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.801300049 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.802227974 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.803431034 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.803436041 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.813520908 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.813576937 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.813581944 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.813922882 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.813971043 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.813976049 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.814924955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.814975023 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.814980030 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.823662996 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.823714972 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.823720932 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.824218035 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.824270010 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.824275017 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.825556993 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.825613976 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.825618029 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864620924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864679098 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864716053 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864753962 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864758015 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.864772081 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864813089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864839077 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.864845991 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864878893 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864911079 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864952087 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.864958048 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.864972115 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.865039110 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.865098953 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.865104914 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.882244110 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.882370949 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.882399082 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.882777929 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.882828951 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.882841110 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.884721994 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.884774923 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.884792089 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.912919044 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.912976980 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.913005114 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.913252115 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.913312912 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.913320065 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.915524960 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.915568113 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.915621996 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.915635109 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.915676117 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.916471958 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.917177916 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.917228937 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.917239904 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.918248892 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.918299913 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.918306112 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.920690060 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.920825958 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.920831919 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.922223091 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.922333956 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.922338009 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.923067093 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.923136950 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.923142910 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.927151918 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.927203894 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.927210093 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.930723906 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.930766106 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.930803061 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.930833101 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.930840969 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.930866957 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.933590889 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.933629990 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.933631897 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.933643103 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.933691978 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.934449911 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.959418058 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.959475994 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.959484100 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.959491014 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.959553957 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.959659100 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.960848093 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.960993052 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.961045027 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.961050987 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.961088896 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.961694956 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.962846041 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.962897062 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.962903023 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.963830948 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.963877916 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.963884115 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.970393896 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.970459938 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.970464945 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.970835924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.970889091 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.970894098 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.972014904 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.972057104 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.972063065 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978358984 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978463888 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.978475094 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978863955 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978909016 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.978913069 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978929043 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.978984118 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.979876041 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.992873907 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.992938995 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.992948055 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.993441105 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.993509054 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.993514061 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.994318962 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.994401932 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.994435072 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:39.994441032 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:39.994683981 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.002192974 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.003133059 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.003206015 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.003221989 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.003248930 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.003303051 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.003384113 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.014550924 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.014611006 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.014622927 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.015124083 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.015208960 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.015213966 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.016160011 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.016215086 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.016221046 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.024962902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.025041103 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.025047064 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.025290012 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.025342941 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.025348902 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.027121067 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.027172089 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.027182102 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.052541018 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.052602053 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.052613020 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.052983999 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.053045034 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.053050995 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.053972960 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.054020882 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.054027081 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.062030077 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.062107086 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.062118053 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.062578917 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.062644958 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.062652111 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.066461086 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.066544056 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.066613913 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.066623926 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.066664934 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.083388090 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.083857059 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.083909035 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.083915949 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.084836006 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.084908962 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.084914923 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115077972 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115134001 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115173101 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115183115 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.115195036 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115226030 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.115247011 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.115288019 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.115294933 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.116584063 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.116641998 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.116647959 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.117546082 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.117608070 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.117614031 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.118750095 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.118819952 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.118824959 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.120879889 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.120954990 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.120959997 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.121378899 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.121432066 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.121438026 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.122255087 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.122339964 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.122349977 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.126483917 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.126534939 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.126547098 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.126555920 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.126602888 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.126609087 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.127532959 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.127584934 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.139158964 CET	49747	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.139169931 CET	443	49747	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.299288988 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.299333096 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.299416065 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.299674988 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:40.299690962 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:40.721534014 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:40.721597910 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:40.721683979 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:40.724526882 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:40.724545956 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:42.089173079 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.098596096 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.098617077 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.099256992 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.099308968 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.099354029 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.099374056 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.099406958 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.099428892 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.101810932 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.116076946 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.116280079 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.119469881 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.119478941 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.163841009 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.567842960 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:42.567910910 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:42.573398113 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:42.573411942 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:42.573824883 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:42.616517067 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:42.804349899 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.807988882 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.808058977 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.808092117 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.819634914 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.819710970 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.819731951 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.829329014 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.829385042 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.829400063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.841428041 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.841481924 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.841495037 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.855070114 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.855216980 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.855232954 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.868675947 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.868772984 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.868789911 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.915637970 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.924068928 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.928374052 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.928426981 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.928457022 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:42.975141048 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:42.975161076 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.018505096 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.018562078 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.018596888 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.018656969 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.018707037 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.025595903 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.032633066 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.032702923 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.032736063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.040074110 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.040146112 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.040200949 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.051497936 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.051578999 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.051599026 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.057457924 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.057511091 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.057526112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.069829941 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.069891930 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.069905996 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.080770969 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.080832005 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.080846071 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.094127893 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.094223976 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.094278097 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.106694937 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.106745005 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.106755018 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.118446112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.118508101 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.118521929 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.130213022 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.130270004 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.130284071 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.142195940 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.142252922 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.142266989 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.153768063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.153827906 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.153845072 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.179325104 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.179378986 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.179392099 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.180927038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.180982113 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.181006908 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.222148895 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.222209930 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.225713015 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.225775957 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.225819111 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.234760046 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.234810114 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.234889030 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.234913111 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.235008955 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.237915993 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.241163015 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.241323948 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.241381884 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.241399050 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.241635084 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.245429993 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.249624014 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.249701977 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.249733925 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.253854036 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.254261971 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.254312038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.260371923 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.260445118 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.260489941 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.264643908 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.265647888 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.265672922 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.269731998 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.269787073 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.269819975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.274291992 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.274389029 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.274437904 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.274449110 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.276488066 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.281039000 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.304244041 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.304560900 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.304621935 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.304641008 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.305932999 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.306000948 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.306016922 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.306082964 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.308583975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.315015078 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.315066099 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.315120935 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.315135956 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.315186977 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.326611996 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.338363886 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.338443995 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.338499069 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.338514090 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.339221001 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.339667082 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.351604939 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.351648092 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.351682901 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.351707935 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.351967096 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.354233027 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.363181114 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.363245010 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.363260031 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.365811110 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.365873098 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.365888119 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.389203072 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.389374971 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.389389038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.392537117 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.392592907 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.392606974 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.395199060 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.395276070 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.395289898 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.398641109 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.399012089 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.399025917 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.438222885 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.438282013 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.438297987 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.439380884 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.439450026 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.439464092 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.443463087 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.443537951 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.443552017 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.445637941 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.445689917 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.445693970 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.445707083 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.446273088 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.447671890 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.449986935 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.450043917 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.450057030 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.451947927 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.451998949 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.452013016 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.454067945 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.454231024 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.454245090 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.456130028 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.456382990 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.456396103 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.458275080 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.458637953 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.458666086 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.462426901 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.462490082 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.462502003 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.464596033 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.464644909 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.464653015 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.464668989 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.464896917 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.466664076 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.468857050 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.468914032 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.468936920 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.470897913 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.470952034 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.470971107 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.473083019 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.473138094 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.473167896 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.475159883 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.475224018 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.475250959 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.479299068 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.479351997 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.479372025 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.481120110 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.481190920 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.481245995 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.481256962 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.482214928 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.482855082 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.484620094 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.484724998 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.484786987 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.484800100 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.486255884 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.487056971 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.488823891 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.488893032 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.488914967 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.491579056 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.491621017 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.491682053 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.491697073 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.494270086 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.494276047 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.494293928 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.494339943 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.498522997 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.499372959 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.499444962 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.499465942 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.506294966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.506344080 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.506416082 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.506453991 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.508508921 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.508583069 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.508618116 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.509000063 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.513567924 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.514394045 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.516555071 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.516613960 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.525331974 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.525388956 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.525404930 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.526292086 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.526341915 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.526351929 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.527961016 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.528007030 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.528018951 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.538311958 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.538353920 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.538363934 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.538382053 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.538433075 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.540060043 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.549143076 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.549294949 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.549315929 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.551592112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.552438974 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.552459002 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.560949087 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.561054945 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.561064959 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.563782930 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.563894987 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.563942909 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.563957930 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.565336943 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.565395117 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.565407991 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.565454006 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.572527885 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.573515892 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.574248075 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.574261904 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.575217962 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.575264931 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.575278997 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.601728916 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.601808071 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.601824999 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.602220058 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.602274895 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.602287054 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.603812933 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.603877068 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.603893042 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.646811962 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.646861076 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.646928072 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.646965981 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.647015095 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.647228003 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.648438931 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.648520947 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.648530960 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.649478912 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.649597883 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.649611950 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.650542021 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.650625944 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.650639057 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.652610064 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.652681112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.652730942 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.652744055 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.653176069 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.653719902 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.654875040 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.654958010 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.654969931 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.656244993 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.656809092 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.656821966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.657330036 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.657388926 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.657402039 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.658233881 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.658313036 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.658327103 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.659193039 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.659259081 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.659286022 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.660326958 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.660460949 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.660475969 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.662318945 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.662369967 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.662381887 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.663400888 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.663465977 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.663479090 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.664700031 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.664756060 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.664767981 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.665595055 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.665852070 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.665864944 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.667373896 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.667530060 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.667543888 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.678989887 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.679053068 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.679064989 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.679574966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.680150986 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.680160046 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.681576967 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.682252884 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.682261944 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.694127083 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.694195032 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.694250107 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.694258928 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.694802999 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.695225000 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.696300030 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.696700096 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.696712971 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.702157974 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.702260017 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.702275038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.702533007 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.703350067 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.703362942 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.704363108 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.704413891 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.704427958 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.716725111 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.716976881 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.716993093 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.718009949 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.718080044 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.718080997 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.718096018 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.718251944 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.719023943 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.724526882 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.724575996 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.724626064 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.724639893 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.725475073 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.725486994 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.726375103 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.726699114 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.726711988 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.748321056 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.748382092 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.748431921 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.748445034 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.748706102 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.749248981 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.750144005 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.750251055 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.750262976 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.759845018 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.759936094 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.760019064 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.760042906 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.760595083 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.760663986 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.760677099 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.762264967 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.762278080 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.771887064 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.772218943 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.772291899 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.772305012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.773499966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.773565054 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.773576975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.774250031 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.783051968 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.783411980 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.783446074 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.783500910 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.783516884 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.783565998 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.784390926 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.812649012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.812720060 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.812778950 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.812797070 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.813699961 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.813765049 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.813779116 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.814260006 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.814271927 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.857753038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.857805967 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.857877016 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.857901096 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.858264923 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.858283043 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.858861923 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.858926058 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.858938932 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.859735966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.859798908 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.859812975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.860491037 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.861200094 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.861259937 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.861275911 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.862159967 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.862221003 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.862236023 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.863095999 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.863109112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.863871098 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.863964081 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.863976955 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.864864111 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.865695953 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.865695953 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.865715027 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.865778923 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.867120028 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.867743969 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.867779016 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.867809057 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.867825031 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.869326115 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.869398117 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.869409084 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.869426966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.869472980 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.870398998 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.871078968 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.871094942 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.871210098 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.871623039 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.871651888 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.874944925 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.875041008 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.875097990 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.875113964 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.876120090 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.876161098 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.876188993 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.876204014 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.876234055 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.889473915 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.889707088 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.889725924 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.890012026 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.890075922 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.890089035 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.890933990 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.890996933 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.891011953 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.904679060 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.905014038 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.905095100 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.905117989 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.905932903 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.905998945 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.906013966 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.906064034 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.906172991 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.912687063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.912811995 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.912831068 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.913162947 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.913213015 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.913227081 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.914969921 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.915039062 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.915055990 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.927499056 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.927576065 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.927598953 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.928623915 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.928666115 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.928685904 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.928704023 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.928868055 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.929527044 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.934772015 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.934832096 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.934870005 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.936157942 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.936243057 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.936276913 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.936294079 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.936367989 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.936932087 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.958508968 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.958566904 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.958584070 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.959722042 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.959779978 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.959793091 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.960611105 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.960678101 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.960690975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.969950914 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.970037937 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.970052958 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.971311092 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.971376896 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.971390963 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.972141981 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.972194910 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.972208023 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.982347965 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.982386112 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.982418060 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.982434988 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.982515097 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.983264923 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.993626118 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.993665934 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.993818998 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.993835926 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.994082928 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.994095087 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.995110035 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:43.995181084 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:43.995196104 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.023044109 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.023104906 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.023123026 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.023399115 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.023447990 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.023463964 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.024564028 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.024599075 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.024641037 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.024656057 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.024707079 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.043698072 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.043745995 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:44.043968916 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.047678947 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.047693968 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:44.067811012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.068197012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.068273067 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.068291903 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.069101095 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.069159985 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.069175005 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.070131063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.070198059 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.070214987 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.071022034 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.071099997 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.071114063 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.071918964 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.071981907 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.071995020 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.072873116 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.072932005 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.072946072 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.074686050 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.074745893 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.074759960 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.075855017 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.075912952 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.075927019 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.077919006 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.077951908 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.078005075 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.078018904 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.078175068 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.078246117 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.079153061 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.079268932 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.079282999 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.080087900 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.080143929 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.080158949 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.081101894 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.081154108 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.081167936 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.082031012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.082079887 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.082093000 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.085454941 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.085510969 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.085525036 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.085977077 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.086042881 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.086056948 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.086725950 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.086805105 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.086817980 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.100227118 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.100290060 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.100306988 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.100579977 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.100724936 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.100739002 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.101447105 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.101505041 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.101519108 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.115237951 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.115339041 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.115360975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.115748882 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.115818024 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.115835905 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.116643906 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.116719961 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.116734028 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.117135048 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.117183924 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:44.117244959 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.117775917 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:44.117791891 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:44.123246908 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.123476982 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.123495102 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.123755932 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.123836994 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.123852015 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.124747992 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.124938965 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.124952078 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.135574102 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.137841940 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.137923002 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.137938976 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.138439894 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.138498068 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.138511896 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.139381886 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.139453888 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.139467955 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.145591974 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.145646095 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.145661116 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.146399975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.146461010 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.146498919 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.146513939 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.146562099 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.147322893 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.169861078 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.169972897 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.169991016 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.170773029 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.170821905 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.170835018 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.171042919 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.171089888 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.171103954 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.180938005 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.180972099 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.180994034 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.181015968 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.181071043 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.181083918 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.181893110 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.181971073 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.181983948 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.183330059 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.189788103 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:44.189821005 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:44.189888000 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:44.190133095 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:44.190145969 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:44.192717075 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.192795992 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.192811012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.193332911 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.193389893 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.193403006 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.194067955 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.194128990 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.194142103 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.204106092 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.204178095 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.204193115 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.205261946 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.205326080 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.205339909 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.206098080 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.206155062 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.206171036 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.233975887 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.234060049 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.234076977 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.235024929 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.235061884 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.235116005 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.235131979 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.235192060 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.236031055 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.278752089 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.278820992 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.278836012 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.278875113 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.279095888 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.279706955 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.280636072 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.280689955 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.280704975 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.281569004 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.281646967 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.281661987 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.282902956 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.282962084 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.282974958 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.283950090 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.284003019 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.284020901 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.284454107 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.284503937 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.284517050 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.285593987 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.285676956 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.285691023 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.288366079 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.288424969 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.288439035 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.288805008 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.288856983 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.288871050 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.289735079 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.289798021 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.289810896 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.289833069 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.289900064 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.290262938 CET	49760	443	192.168.2.4	172.217.19.225
Nov 20, 2024 21:18:44.290294886 CET	443	49760	172.217.19.225	192.168.2.4
Nov 20, 2024 21:18:44.454926014 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:44.455084085 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:44.455183983 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:44.743746042 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.743810892 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.743830919 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.743872881 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.743896961 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.743947029 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.744049072 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.744096994 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.744096994 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.744127035 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.765888929 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.765995026 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.766021967 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.766073942 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:44.766133070 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:44.888329029 CET	49740	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:18:44.888385057 CET	443	49740	172.217.21.36	192.168.2.4
Nov 20, 2024 21:18:45.809570074 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.809815884 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.809843063 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.810386896 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.810761929 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.810859919 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.810931921 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.810995102 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.811018944 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.811055899 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.811220884 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.811249018 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.812336922 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.812693119 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.812783003 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.812792063 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.812807083 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.812845945 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:45.863809109 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:45.934063911 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.934299946 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:45.934310913 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.934668064 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.934730053 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:45.935353041 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.935406923 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:45.936394930 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:45.936460972 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.936738968 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:45.936747074 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:45.988693953 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.061604977 CET	80	49723	217.20.59.34	192.168.2.4
Nov 20, 2024 21:18:46.061851978 CET	49723	80	192.168.2.4	217.20.59.34
Nov 20, 2024 21:18:46.061852932 CET	49723	80	192.168.2.4	217.20.59.34
Nov 20, 2024 21:18:46.181699991 CET	80	49723	217.20.59.34	192.168.2.4
Nov 20, 2024 21:18:46.269684076 CET	49761	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:18:46.269721031 CET	443	49761	4.245.163.56	192.168.2.4
Nov 20, 2024 21:18:46.714235067 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.714287996 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.714328051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.714360952 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.714370966 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.714415073 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.721970081 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.722285032 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.722373962 CET	443	49771	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.722429991 CET	49771	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.722517967 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.735263109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.735388041 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.735394955 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.745487928 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.745543957 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.745551109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.750176907 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:46.750577927 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.750673056 CET	443	49773	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:46.750746012 CET	49773	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.751616955 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.751642942 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:46.751773119 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.752058983 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:46.752068996 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:46.759083986 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.759140968 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.759150982 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.801567078 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.834736109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.838929892 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.839004993 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.839004040 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.839035034 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.839365005 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.906078100 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.911343098 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.911401033 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.911427021 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.921956062 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.922009945 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.922018051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.935714960 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.935756922 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.935771942 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.935786963 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.935822010 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.949242115 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.963303089 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.963370085 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.963385105 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.963399887 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.963442087 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.976423979 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.990159035 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.990220070 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.990221024 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:46.990238905 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:46.990277052 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.003793001 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.016434908 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.016491890 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.016503096 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.018907070 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.018969059 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.018982887 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.031006098 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.031061888 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.031069994 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.038302898 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:47.038332939 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:47.038420916 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:47.039123058 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:47.039139032 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:47.039597988 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.039639950 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.039705992 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.040003061 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.040021896 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.043410063 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.043632030 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.043643951 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.055845022 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.055906057 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.055927992 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.091295958 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.091531992 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.091578007 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.097929955 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.097984076 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.097992897 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.105818033 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.105874062 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.105881929 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.116033077 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.116082907 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.116091013 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.126148939 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.126230001 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.126236916 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.135562897 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.135818005 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.135824919 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.144963026 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.145025969 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.145034075 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.154047012 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.154108047 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.154114962 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.163309097 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.163361073 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.163367987 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.172139883 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.172195911 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.172202110 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.180809975 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.180866957 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.180874109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.190120935 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.190174103 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.190181017 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.199068069 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.199112892 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.199120045 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.208648920 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.208693027 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.208699942 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.216650009 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.216705084 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.216711998 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.226139069 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.226207018 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.226212978 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.234352112 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.234437943 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.234446049 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.242650986 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.242698908 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.242707014 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.250452042 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.250505924 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.250515938 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.258547068 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.258605957 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.258613110 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.266119003 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.266191006 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.266200066 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.274152040 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.274204969 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.274214029 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.281182051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.281229973 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.281236887 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.288944960 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.288995981 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.289002895 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.294009924 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.294054985 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.294061899 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.299504995 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.299557924 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.299571037 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.304346085 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.304390907 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.304399967 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.309401989 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.309442997 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.309449911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.314265013 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.314317942 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.314325094 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.319829941 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.319881916 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.319889069 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.324496031 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.324551105 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.324558973 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.329632044 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.329685926 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.329691887 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.334067106 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.334115028 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.334121943 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.340066910 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.340116978 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.340123892 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.343887091 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.343933105 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.343940020 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.348563910 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.348617077 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.348623037 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.353260994 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.353307009 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.353313923 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.357959986 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.358011961 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.358019114 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.362586975 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.362637997 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.362644911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.367420912 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.367468119 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.367474079 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.371948957 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.372001886 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.372008085 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.376310110 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.376360893 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.376367092 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.380954981 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.381005049 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.381011963 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.385196924 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.385248899 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.385255098 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.389746904 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.389800072 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.389806032 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.393975973 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.394023895 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.394031048 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.398245096 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.398292065 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.398298979 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.402585983 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.402636051 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.402642012 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.406599998 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.406646967 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.406653881 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.411101103 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.411150932 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.411158085 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.432971954 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.433078051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.433262110 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.433269978 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.433315039 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.433877945 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.435787916 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.435837030 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.435842991 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.437745094 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.437797070 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.437803030 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.439523935 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.439574003 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.439580917 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.441504002 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.441554070 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.441560984 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.444761038 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.444823980 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.444829941 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.446717978 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.446774006 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.446779966 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.449079990 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.449153900 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.449160099 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.450994968 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.451051950 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.451056957 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.454546928 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.454586983 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.454596996 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.458565950 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.458631992 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.458638906 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.458919048 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.458977938 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.458983898 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.462093115 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.462153912 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.462161064 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.466267109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.466346025 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.466352940 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.470010042 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.470074892 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.470083952 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.473115921 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.473174095 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.473181009 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.477540970 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.477610111 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.477627039 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.480382919 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.480506897 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.480523109 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.483587027 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.483726978 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.483741999 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.486098051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.486151934 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.486160040 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.489331961 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.489382982 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.489389896 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.493202925 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.493253946 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.493261099 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.495954990 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.496011019 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.496017933 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.499757051 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.499810934 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.499816895 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.503720999 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.503793955 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.503801107 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.508393049 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.508450985 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.508457899 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.513288021 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.513413906 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.513421059 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.514029026 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.514133930 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.514139891 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.524935961 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.525021076 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.525031090 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.525049925 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.525094986 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.526034117 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.527158022 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.527210951 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.527216911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.540349007 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.540412903 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.540419102 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.541529894 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.541600943 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.541606903 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.542610884 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.542670965 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.542676926 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.557351112 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.557436943 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.557442904 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.557662964 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.557713032 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.557718992 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.558779001 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.558825970 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.558832884 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.566878080 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.566929102 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.566935062 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.568180084 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.568243027 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.568249941 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.569287062 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.569339037 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.569345951 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.577801943 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.577868938 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.577874899 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.579144001 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.579197884 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.579204082 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.580192089 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.580257893 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.580264091 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602327108 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602425098 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.602437973 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602472067 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602523088 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602524042 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.602535963 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602583885 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.602596998 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602642059 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602695942 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.602706909 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602767944 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602802038 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602813005 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.602827072 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.602879047 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.614195108 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.614684105 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.614727020 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.614753962 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.614762068 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.614803076 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.615658998 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.623972893 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.624027014 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.624033928 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.624454975 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.624501944 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.624509096 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.625621080 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.625690937 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.625696898 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.634988070 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.635049105 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.635055065 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.635850906 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.635920048 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.635926008 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.637104988 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.637151003 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.637156963 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.646454096 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.646505117 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.646512032 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.646861076 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.646909952 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.646917105 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.648147106 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.648197889 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.648204088 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.657680988 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.657777071 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.657788038 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.658269882 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.658323050 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.658329010 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.659130096 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.659173965 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.659181118 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.668715954 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.668842077 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.668848991 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.669342041 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.669424057 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.669482946 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.669490099 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.669534922 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.670330048 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.678051949 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.678128004 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.678147078 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.678425074 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.678474903 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.678483963 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.680147886 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.680218935 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.680224895 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.687882900 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.687943935 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.687952042 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.688507080 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.688555956 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.688563108 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.689322948 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.689378977 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.689384937 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.700205088 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.700249910 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.700258017 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.700649023 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.700690031 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.700696945 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.701709032 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.701777935 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.701785088 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.716738939 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.716824055 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.716831923 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.717199087 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.717243910 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.717251062 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.718193054 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.718239069 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.718245983 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.732213974 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.732307911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.732388020 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.732403994 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.732475042 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.732511997 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.734015942 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.734095097 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.734107971 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.749892950 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.750041008 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.750055075 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.750252008 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.750394106 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.750406027 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.751915932 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.751982927 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.751995087 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.759083033 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.759166956 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.759208918 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.759433985 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.759479046 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.759497881 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.760633945 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.760709047 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.760731936 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.769893885 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.769969940 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.769983053 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.770052910 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.770107985 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.770114899 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.771226883 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.771291971 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.771305084 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.783006907 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.783077002 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.783088923 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.783113956 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.783159971 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.783982992 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.785068035 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.785121918 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.785130978 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.791244030 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.791307926 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.791326046 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.792382002 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.792443991 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.792449951 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.793288946 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.793349981 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.793356895 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.806674004 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.806723118 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.806736946 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.807594061 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.807636976 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.807642937 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.808482885 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.808523893 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.808530092 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.816175938 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.816260099 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.816289902 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.817421913 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.817470074 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.817480087 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.818289042 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.818340063 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.818346977 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.827377081 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.827440977 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.827459097 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.828318119 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.828366041 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.828375101 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.829235077 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.829283953 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.829289913 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.838850975 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.838886976 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.838901997 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.838913918 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.838949919 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.839716911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.849798918 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.849850893 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.849880934 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.850258112 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.850301027 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.850308895 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.851123095 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.851161003 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.851169109 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.851176977 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.851218939 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.860723972 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.861008883 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.861072063 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.861089945 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.861948013 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.862020016 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.862031937 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.870181084 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.870268106 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.870281935 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.870687962 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.870742083 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.870753050 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.871596098 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.871649027 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.871659994 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.879904985 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.879965067 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.879976988 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.880539894 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.880594969 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.880606890 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.881586075 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.881650925 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.881661892 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.892724037 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.892797947 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.892810106 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.892962933 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.893028021 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.893039942 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.894232988 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.894284010 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.894295931 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.908896923 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.908979893 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.908987999 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.909225941 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.909281969 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.909287930 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.910161972 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.910211086 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.910217047 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.924001932 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.924056053 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.924069881 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.924490929 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.924535990 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.924541950 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.925368071 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.925410986 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.925417900 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.941579103 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.941642046 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.941657066 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.941800117 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.941845894 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.941858053 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.942696095 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.942749023 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.942760944 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.950942993 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.950989962 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.951004028 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.951323986 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.951374054 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.951386929 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.952188015 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.952246904 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.952260017 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.961627007 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.961692095 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.961707115 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.962532043 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.962584972 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.962596893 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.963483095 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.963537931 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.963550091 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.974793911 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.974853039 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.974867105 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.975527048 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.975588083 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.975600004 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.976275921 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.976341009 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.976351976 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.983105898 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.983171940 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.983185053 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.984306097 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.984344959 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.984355927 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.984370947 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.984427929 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.985083103 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.998961926 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.999022007 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.999037981 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.999135017 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:47.999186993 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:47.999200106 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.000688076 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.000752926 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.000760078 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.008332014 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.008390903 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.008398056 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.008917093 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.008959055 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.008965015 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.009691000 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.009737968 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.009744883 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.019323111 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.019375086 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.019382954 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.019793987 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.019845009 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.019850969 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.020538092 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.020590067 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.020711899 CET	49772	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.020728111 CET	443	49772	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.181082964 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.181130886 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.181207895 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.181401968 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.181421041 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.500658035 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.500905991 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.500919104 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.501264095 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.501316071 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.501873970 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.501919031 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.502083063 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.502135992 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.502326965 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.502334118 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.502368927 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.502393961 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.550925970 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.733722925 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.733966112 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.734025955 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.734534025 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.734867096 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.734945059 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.735016108 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.735017061 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:48.735057116 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:48.782840967 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.783060074 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.783068895 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.784426928 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.784491062 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.787127018 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.787180901 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.787503004 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.787677050 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.787764072 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.787770033 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.787801027 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:48.787832975 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:48.832649946 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:49.271754026 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.277725935 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.277789116 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:49.278512001 CET	49780	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:49.278529882 CET	443	49780	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.423141956 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:49.423168898 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:49.423238039 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:49.423456907 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:49.423470020 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:49.573913097 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.574342012 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.574465036 CET	443	49783	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.574527979 CET	49783	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.624617100 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.628180027 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.628242016 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:49.628773928 CET	49782	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:18:49.628788948 CET	443	49782	172.217.19.238	192.168.2.4
Nov 20, 2024 21:18:49.943861961 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.944180965 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.944243908 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.945540905 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.945617914 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.948059082 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.948123932 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.948272943 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.948398113 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.948410034 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.948456049 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:49.991589069 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:49.991622925 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:50.032598019 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:50.885839939 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:50.885978937 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:50.886033058 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:50.886079073 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:50.892973900 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:50.893055916 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:50.893158913 CET	49784	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:18:50.893188000 CET	443	49784	142.250.181.14	192.168.2.4
Nov 20, 2024 21:18:51.165056944 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.165326118 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.165354013 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.166691065 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.166766882 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.169020891 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.169071913 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.169223070 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.169281960 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.169365883 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.169373989 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.223134041 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.971908092 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.972019911 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.972074032 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.972100019 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.974514008 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.974591017 CET	443	49788	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.974647045 CET	49788	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.977504969 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.977536917 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:51.977592945 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.978015900 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:51.978035927 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.852394104 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.852732897 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:53.852758884 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.853282928 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.853353024 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:53.854285955 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.854326963 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:53.854645967 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:53.854733944 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.855209112 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:53.855215073 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:53.894887924 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:54.676506996 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:54.676620007 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:54.676716089 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:54.676743031 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:54.677695990 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:18:54.677793980 CET	443	49796	172.217.19.206	192.168.2.4
Nov 20, 2024 21:18:54.677855968 CET	49796	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:01.328090906 CET	80	49724	217.20.59.34	192.168.2.4
Nov 20, 2024 21:19:01.328181982 CET	49724	80	192.168.2.4	217.20.59.34
Nov 20, 2024 21:19:01.328241110 CET	49724	80	192.168.2.4	217.20.59.34
Nov 20, 2024 21:19:01.447782993 CET	80	49724	217.20.59.34	192.168.2.4
Nov 20, 2024 21:19:05.234594107 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:05.234628916 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:05.234700918 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:05.234966040 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:05.234978914 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.986711025 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.987190008 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:06.987236977 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.988781929 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.988862038 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:06.988871098 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.988914967 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:06.989927053 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:06.990030050 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:06.990170956 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:06.990175962 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:07.034025908 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.791090012 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:07.791307926 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:07.791367054 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.791389942 CET	443	49829	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:07.791416883 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.791450977 CET	49829	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.791831970 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.791929007 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:07.792006016 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.792207003 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:07.792246103 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.587102890 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.587532043 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:09.587580919 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.588840961 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.589205980 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:09.589301109 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.589373112 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:09.631342888 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:09.632919073 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:10.405379057 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:10.405461073 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:10.405527115 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:10.405601978 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:10.405649900 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:10.406486034 CET	49837	443	192.168.2.4	172.217.17.49
Nov 20, 2024 21:19:10.406521082 CET	443	49837	172.217.17.49	192.168.2.4
Nov 20, 2024 21:19:16.445219040 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:19:16.445249081 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:19:19.204294920 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:19.204355955 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:19.204431057 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:19.204608917 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:19.204636097 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.957906008 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.958164930 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:20.958199024 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.959311008 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.959379911 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:20.960401058 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.960448980 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:20.961400032 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:20.961488962 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:20.961591959 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.004714966 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.004740000 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.051486969 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.622204065 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.622306108 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.622492075 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.622771025 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.622807026 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.852812052 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.852950096 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.853189945 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.853256941 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.853321075 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.860565901 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.860677004 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.867487907 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.867566109 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.880404949 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.880482912 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.880532026 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.880590916 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.892919064 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.892986059 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.972091913 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.972191095 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:21.976119041 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:21.976192951 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.053355932 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.053415060 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.053438902 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.053483963 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.057203054 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.057267904 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.066637993 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.066688061 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.074131966 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.074208021 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.075371981 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.075423002 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.086952925 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.087007046 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.087030888 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.100630999 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.100734949 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.100763083 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.114075899 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.114154100 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.114180088 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.114833117 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.114886999 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.115789890 CET	49884	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.115813971 CET	443	49884	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.140960932 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.141011953 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.141077042 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.141382933 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.141402960 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.213793039 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.213843107 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.213905096 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.214421034 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:22.214440107 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:22.794450998 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:22.794550896 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:22.794627905 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:22.795200109 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:22.795236111 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:23.114130020 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:23.114175081 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:23.114239931 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:23.116333961 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:23.116345882 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:23.362775087 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.367826939 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.367893934 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.369154930 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.369237900 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.371660948 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.371741056 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.371895075 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.372077942 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.372123957 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.419338942 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.426589012 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.426623106 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.468375921 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.885582924 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.893879890 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.893955946 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.894793034 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.895864964 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.896028996 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.896873951 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.943344116 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.951941967 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.956391096 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.956423998 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.957734108 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.959963083 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.959999084 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.960020065 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.960546017 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.984343052 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:23.984569073 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:23.988404989 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.030522108 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.030555964 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.077049971 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.167464972 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.168157101 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.168268919 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.168705940 CET	443	49890	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.168796062 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.168796062 CET	49890	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.170157909 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.170253992 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.170348883 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.170685053 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.170767069 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.675265074 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:24.675334930 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:24.680170059 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:24.680197001 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:24.680459023 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:24.689364910 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:24.690556049 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.691200972 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.691298962 CET	443	49894	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.691354990 CET	49894	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.693177938 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.693233013 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.693295002 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.694329977 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.694348097 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.735338926 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:24.752495050 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.752868891 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.752957106 CET	443	49896	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.753007889 CET	49896	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.754218102 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.754252911 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.754311085 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.754745960 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:24.754762888 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:24.942064047 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:24.942121029 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:24.945231915 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:24.945240021 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:24.945631027 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:24.955823898 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.003335953 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.276763916 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.276794910 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.276812077 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.277090073 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.277153969 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.277755976 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.541223049 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.541234970 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.541276932 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.541331053 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.541397095 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.541464090 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.541547060 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.570838928 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.570854902 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.570925951 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.570964098 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.571259975 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.736428022 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.736450911 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.736620903 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.736620903 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.736689091 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.736773014 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.748235941 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.748303890 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.748348951 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.748408079 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.748433113 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.748464108 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.748506069 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.761801004 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.761816978 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.762137890 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.762201071 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.762650967 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.782351017 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.782367945 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.782491922 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.782545090 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.782680035 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.784759045 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.784817934 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.784826994 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.784866095 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.784899950 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.785423994 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.785584927 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.785598040 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.785624027 CET	49900	443	192.168.2.4	4.245.163.56
Nov 20, 2024 21:19:25.785629034 CET	443	49900	4.245.163.56	192.168.2.4
Nov 20, 2024 21:19:25.800950050 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.800965071 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.801090002 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.801109076 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.801176071 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.943769932 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.943788052 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.943929911 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.943929911 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.943995953 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.944073915 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.959157944 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.959175110 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.959264994 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.959287882 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.959404945 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.974869013 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.974884033 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.974991083 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.975004911 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.975121021 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.988631964 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.988647938 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.988766909 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:25.988786936 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:25.988859892 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.004954100 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.004968882 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.005217075 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.005232096 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.005315065 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.006650925 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.006711006 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.006741047 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.006791115 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.006828070 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.006894112 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.007369995 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.007402897 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.008232117 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.008260965 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.046444893 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.046457052 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.046480894 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.046541929 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.046578884 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.046726942 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.047195911 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.047209024 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.047305107 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.047353983 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.048742056 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.048767090 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.048906088 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.049094915 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.049120903 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.050729990 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.050738096 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.050944090 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.051965952 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.051968098 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.051980019 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.051999092 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.052056074 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.052311897 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:26.052328110 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:26.119347095 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.119621038 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.119653940 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.120177984 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.120578051 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.120661974 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.120682001 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.120682001 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.120711088 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.161523104 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.539457083 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.578746080 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.578809023 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.579391003 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.580106974 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.580208063 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.580650091 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.580684900 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.580763102 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.644438028 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.644701958 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.644735098 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.645956993 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.646018028 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.648467064 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.648528099 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.648711920 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.648847103 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.648863077 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.648891926 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.648921967 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.689089060 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.689121008 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.729239941 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.871655941 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.878983974 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.879240036 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.879735947 CET	49902	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:26.879760981 CET	443	49902	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:26.883816957 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:26.883863926 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:26.883922100 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:26.884164095 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:26.884174109 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:27.278511047 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.283138037 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.283214092 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.283411980 CET	49904	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.283463955 CET	443	49904	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.395664930 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.397747040 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.397825956 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.397942066 CET	49905	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.397965908 CET	443	49905	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.768938065 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.769581079 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.769592047 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.770107031 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.770158052 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.771104097 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.771152020 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.771492958 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.771574974 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.771778107 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.771787882 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.771806955 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.771821976 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:27.816746950 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:27.847340107 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.847835064 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.847919941 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.848556995 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.848575115 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.927093029 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.927534103 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.927571058 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.927937984 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.927949905 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.964881897 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.965269089 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.965295076 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.965646982 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.965655088 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.981513977 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.981823921 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.981869936 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.982254982 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.982265949 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.985645056 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.985986948 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.986025095 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:27.986404896 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:27.986412048 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.284476995 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.284503937 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.284559965 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.284600019 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.284646988 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.284823895 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.284823895 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.284842014 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.285054922 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.285095930 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.285142899 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.288949013 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.288981915 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.289047956 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.289210081 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.289222956 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.374634027 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.374666929 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.374727011 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.374789953 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.374854088 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.374974966 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.374974966 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.374996901 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.375212908 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.375256062 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.375752926 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.377131939 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.377168894 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.377266884 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.377387047 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.377397060 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.412689924 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.412746906 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.412873983 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.412894011 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.413008928 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.413008928 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.413029909 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.413362980 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.413450003 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.413496017 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.415241957 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.415350914 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.415416002 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.415545940 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.415570974 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.460963011 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461050987 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461107016 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.461165905 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.461184978 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461195946 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.461200953 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461455107 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461602926 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.461678028 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.461961031 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.461965084 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.463186979 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.463226080 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.463320971 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.463438988 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.463457108 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.463844061 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.463867903 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.463924885 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.464061975 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:28.464078903 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:28.619391918 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:28.622253895 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:28.622307062 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:28.622601986 CET	49907	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:28.622626066 CET	443	49907	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:28.669313908 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.669521093 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.669534922 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.670026064 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.670084000 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.671025038 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.671081066 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.671235085 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.671308994 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.671360016 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.719332933 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.722717047 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.722724915 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:28.769596100 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:28.993890047 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:28.993943930 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:28.994007111 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:28.997591972 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:28.997612000 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:29.547692060 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:29.547740936 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:29.547795057 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.547836065 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:29.565531015 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.565644026 CET	443	49915	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:29.565742970 CET	49915	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.566622019 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.566660881 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:29.566751003 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.567974091 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:29.567994118 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:30.014642000 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.015142918 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.015160084 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.015661001 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.015671968 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.217370033 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.217856884 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.217880011 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.218290091 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.218297005 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.233119011 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.233480930 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.233513117 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.233999968 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.234009027 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.248697042 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.250253916 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.250341892 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.250819921 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.250833988 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.267438889 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.267784119 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.267817020 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.268177986 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.268188953 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.458159924 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.458268881 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.458348036 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.459346056 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.459367990 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.459378958 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.459383965 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.462006092 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.462063074 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.462224007 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.462388039 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.462404966 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.654592991 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.654675961 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.654731035 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.654958963 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.654983044 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.654994965 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.655002117 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.657797098 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.657850027 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.657907963 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.658057928 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.658068895 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.692955971 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.693038940 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.693191051 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.693265915 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.693306923 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.693355083 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.693372011 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.695667982 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.695741892 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.696091890 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.696235895 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.696235895 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.696259022 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.696266890 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.697328091 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.697365999 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.697432041 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.697613001 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.697629929 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.698774099 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.698868036 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.698940039 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.699198961 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.699232101 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.730340958 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.730520964 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.730617046 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.730664968 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.730664968 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.730691910 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.730715036 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.733330965 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.733355045 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.733561993 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.733753920 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:30.733767986 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:30.753623962 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:30.753931999 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:30.753956079 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:30.754246950 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:30.754614115 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:30.754668951 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:30.754756927 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:30.795331955 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.269784927 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.270101070 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.270132065 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.270623922 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.270694971 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.271631956 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.271682978 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.271899939 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.271979094 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.272208929 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.272222042 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:31.318170071 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:31.453277111 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.453330040 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.453356028 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.453385115 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.453418970 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.453461885 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.453474998 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.459794044 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.460438013 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.579339027 CET	49923	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.579375029 CET	443	49923	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.640676022 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:19:31.640943050 CET	443	49736	199.36.158.100	192.168.2.4
Nov 20, 2024 21:19:31.641088009 CET	49736	443	192.168.2.4	199.36.158.100
Nov 20, 2024 21:19:31.784524918 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.784584999 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:31.784646988 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.784898043 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:31.784919024 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:32.071233034 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.071368933 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.071605921 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.071631908 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.076301098 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:32.076359987 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:32.076417923 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:32.077239990 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:32.077264071 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:32.118443966 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.128772020 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.128890038 CET	443	49924	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.129125118 CET	49924	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.130537987 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.130587101 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.130747080 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.131021023 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:32.131036043 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:32.315752983 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.357055902 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.363183022 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.363213062 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.366455078 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.366466999 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.460099936 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.461038113 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.461061954 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.462073088 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.462078094 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.498441935 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.498831034 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.498847961 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.499334097 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.499339104 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.515779972 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.516339064 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.516366959 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.517071009 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.517076015 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.550564051 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.551845074 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.551872969 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.552622080 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.552627087 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.767966032 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.768059969 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.768127918 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.768299103 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.768331051 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.768347025 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.768353939 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.773134947 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.773180008 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.773238897 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.773581028 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.773593903 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.836256027 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:32.836296082 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:32.836355925 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:32.836689949 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:32.836702108 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:32.942611933 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.942773104 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.942972898 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.943082094 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.943082094 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.943109989 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.943124056 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.946057081 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.946089983 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.946175098 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.946393013 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.946407080 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.972425938 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.972606897 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.972771883 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.972847939 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.972847939 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.972893953 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.972923040 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.973215103 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.973295927 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.973531008 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.973983049 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.974008083 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.978183985 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.978235006 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.978306055 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.979207039 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.979244947 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.979445934 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.979659081 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.979672909 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:32.979814053 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:32.979835033 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.008804083 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.008975983 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.009052992 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.009139061 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.009172916 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.009197950 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.009212017 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.012171030 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.012217045 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.012284994 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.012465000 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:33.012479067 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:33.544435978 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:33.544888020 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:33.544924021 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:33.548671007 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:33.548748970 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:33.549346924 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:33.549417019 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:33.549582005 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:33.549590111 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:33.603337049 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:33.821716070 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.822276115 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.822315931 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.822927952 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.823003054 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.823216915 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.823554993 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:33.823582888 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.823960066 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.824047089 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.824265003 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.824359894 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.824440956 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.824892044 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.825757027 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:33.825951099 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:33.825962067 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.825994015 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.826111078 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:33.865041018 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:33.865075111 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:33.867353916 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:33.910834074 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.238492966 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238552094 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238593102 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.238601923 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238631964 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238667965 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238671064 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.238698959 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.238739014 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.244946957 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.245002031 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.245059967 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.248769999 CET	49931	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.248789072 CET	443	49931	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.527132988 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.527390957 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.527422905 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.527780056 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.528080940 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.528147936 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:34.563771963 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.564197063 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.564230919 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.564795971 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.564800978 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.568538904 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:34.570643902 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:34.573925018 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:34.573976040 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:34.574158907 CET	49932	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:34.574179888 CET	443	49932	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:34.694161892 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.694194078 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.694246054 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.694289923 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.695758104 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.695804119 CET	443	49933	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.695852995 CET	49933	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.696815014 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.696852922 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.696908951 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.697869062 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:34.697880983 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:34.734327078 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.737447023 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.737481117 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.738199949 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.738205910 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.766351938 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.767079115 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.767160892 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.767478943 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.767509937 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.767819881 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.768229961 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.768245935 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.768680096 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.768683910 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.807667017 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.808010101 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.808037996 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:34.808540106 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:34.808545113 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.012573004 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.012665033 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.012717009 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.012839079 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.012862921 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.012872934 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.012878895 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.015482903 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.015579939 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.015671015 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.015928030 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.015965939 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.181210995 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.181279898 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.181319952 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.181545973 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.181567907 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.181579113 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.181583881 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.184881926 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.184940100 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.185009003 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.185234070 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.185251951 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.218605042 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.218691111 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.218729973 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.218888998 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.218907118 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.218918085 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.218924046 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.219551086 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.219614983 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.219687939 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.219842911 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.219891071 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.219919920 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.219937086 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.222107887 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222193956 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.222338915 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222378016 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222392082 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.222440004 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222517967 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222553015 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.222580910 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.222592115 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.250437021 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.250595093 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.250664949 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.250705004 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.250705004 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.250721931 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.250731945 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.252960920 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.253026962 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:35.253091097 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.253262043 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:35.253295898 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.389255047 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.389739990 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.389782906 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.390306950 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.390362978 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.391329050 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.391377926 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.391750097 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.391830921 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.392009974 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.392019033 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:36.432941914 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:36.760459900 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.763413906 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:36.763456106 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.764328957 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:36.764337063 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.938132048 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.938699007 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:36.938755989 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:36.939424038 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:36.939439058 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.020596027 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.021133900 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.021213055 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.021810055 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.021825075 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.024463892 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.025017023 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.025067091 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.025403023 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.025409937 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.103768110 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.115197897 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.115278006 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.115626097 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.115650892 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.204624891 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.204817057 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.204924107 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.206451893 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.206504107 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.206556082 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.206573963 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.210360050 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.210444927 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.210542917 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.210793018 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.210810900 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.300668955 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.300791025 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.300841093 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.300880909 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.301848888 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.301948071 CET	443	49942	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.301995993 CET	49942	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.302582979 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.302620888 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.302679062 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.303263903 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:37.303282022 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:37.376792908 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.376879930 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.376930952 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.377228975 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.377254009 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.377271891 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.377278090 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.382038116 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.382096052 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.382169008 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.382405996 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.382426977 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.464263916 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.464358091 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.464426041 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.464632034 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.464678049 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.464709997 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.464725971 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.467713118 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.467833996 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.467916012 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.468106031 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.468141079 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.477904081 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.477979898 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.478024006 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.478138924 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.478157043 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.478166103 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.478172064 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.480571985 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.480622053 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.480695963 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.480832100 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.480846882 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.556680918 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.556881905 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.556957006 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.557040930 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.557090044 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.557120085 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.557137012 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.560028076 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.560075998 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:37.560153008 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.560306072 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:37.560323000 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.057739973 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.060201883 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.060221910 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.061017036 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.061094046 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.062546968 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.062868118 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.062868118 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.062983990 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.063044071 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.103358984 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.115858078 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.115869999 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.136450052 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.137634993 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.137634993 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.137670040 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.137680054 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.165246010 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.246223927 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.246710062 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.246748924 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.247302055 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.247308969 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.257879019 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.259816885 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.259848118 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.260881901 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.260890007 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.348191977 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.348896980 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.348922014 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.349994898 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.350003004 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.364317894 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.364702940 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.364746094 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.365546942 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.365554094 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.589535952 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.589622021 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.589689970 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.589920998 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.589943886 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.589956999 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.589963913 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.592969894 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.593015909 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.593238115 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.593401909 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.593415976 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.681349993 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.681430101 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.681833029 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.682524920 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.682590008 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.682624102 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.682641029 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.685383081 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.685426950 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.685530901 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.685746908 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.685762882 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.711023092 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.711091995 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.711153030 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.711342096 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.711342096 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.711363077 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.711374044 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.714165926 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.714214087 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.714413881 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.714584112 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.714611053 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.793358088 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.793521881 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.793653011 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.793732882 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.793750048 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.793770075 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.793776989 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.796783924 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.796879053 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.797019958 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.797190905 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.797221899 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.835614920 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.835783005 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.835973024 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.849764109 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.849793911 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.849807978 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.849814892 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.855972052 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.856034040 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.856103897 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.856591940 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:39.856621981 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:39.884680986 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:39.884727955 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:39.884968042 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:39.888391018 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:39.888412952 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:39.924359083 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.924402952 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.924439907 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.924462080 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.925339937 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:39.925386906 CET	443	49949	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:39.925494909 CET	49949	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:41.314055920 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.338035107 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.338068008 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.345786095 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.345792055 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.493659973 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.494415998 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.494497061 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.494896889 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.494910955 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.537545919 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.538866043 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.538894892 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.539735079 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.539743900 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.632386923 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:41.632726908 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:41.632767916 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:41.634047031 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:41.634730101 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:41.634906054 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:41.634937048 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:41.634984970 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:41.635020971 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:41.644792080 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.645173073 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.645766973 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.645804882 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.646080017 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.646116018 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.646388054 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.646395922 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.646697998 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.646703959 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.752799988 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.752890110 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.752947092 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.753283024 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.753310919 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.753324986 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.753333092 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.757277966 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.757390976 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.757469893 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.757664919 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.757704020 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.939438105 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.939604998 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.939677000 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.939860106 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.939882994 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.939893007 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.939898968 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.943568945 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.943627119 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.943716049 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.943890095 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.943905115 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.990006924 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.990166903 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.990237951 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.993470907 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.993491888 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.999186039 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.999295950 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:41.999372959 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.999547958 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:41.999583960 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.064030886 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:42.064101934 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:42.064312935 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:42.064630032 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:42.064656973 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:42.088673115 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.088823080 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.089009047 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.089056969 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.089056969 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.089082003 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.089108944 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.092222929 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.092248917 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.092323065 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.092477083 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.092490911 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.109210014 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.109375954 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.109457970 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.109530926 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.109530926 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.109574080 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.109601021 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.112112999 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.112159014 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.112229109 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.112389088 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:42.112409115 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:42.376224041 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:42.379524946 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:42.379592896 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:42.379801989 CET	49959	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:42.379822969 CET	443	49959	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:42.384505987 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:42.384602070 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:42.384789944 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:42.385066986 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:42.385098934 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:43.541306973 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.541783094 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.541862011 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.542237997 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.542254925 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.759785891 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:43.760065079 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:43.760127068 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:43.760509968 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:43.760845900 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:43.760916948 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:43.760974884 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:43.761008978 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:43.761020899 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:43.763747931 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.764230967 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.764307022 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.764693975 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.764708996 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.772504091 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.772869110 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.772887945 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.773221970 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.773227930 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.865653992 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.866069078 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.866106987 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.866447926 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.866452932 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.943533897 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.944008112 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.944039106 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.944473028 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.944478989 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.988905907 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.988970995 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.989032984 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.989161015 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.989207983 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.989242077 CET	49961	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.989258051 CET	443	49961	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.992098093 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.992142916 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:43.992222071 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.992372990 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:43.992386103 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.138145924 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.138422966 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.138448954 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.139185905 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.139249086 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.140197992 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.140247107 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.140389919 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.140475035 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.140523911 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.183366060 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.191469908 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.191498995 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:44.198390961 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.198544979 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.198625088 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.198726892 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.198770046 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.198800087 CET	49963	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.198817015 CET	443	49963	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.201435089 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.201483011 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.201738119 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.201935053 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.201971054 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.225616932 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:44.225799084 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:44.225883007 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:44.229757071 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.229921103 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.230041981 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.230072021 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.230079889 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.230089903 CET	49966	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.230099916 CET	443	49966	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.232136011 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.232155085 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.232348919 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.232495070 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.232508898 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.237184048 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:44.310323000 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.310492992 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.310585022 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.310585022 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.310616016 CET	49962	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.310626030 CET	443	49962	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.312982082 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.313075066 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.313185930 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.313290119 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.313312054 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.415864944 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.415956020 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.416140079 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.416140079 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.416229010 CET	49967	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.416269064 CET	443	49967	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.418466091 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.418497086 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.418606043 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.418765068 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:44.418778896 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:44.495206118 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:44.498220921 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:44.498296976 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:44.498493910 CET	49965	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:44.498538017 CET	443	49965	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:44.694097042 CET	49936	443	192.168.2.4	172.217.21.36
Nov 20, 2024 21:19:44.694135904 CET	443	49936	172.217.21.36	192.168.2.4
Nov 20, 2024 21:19:45.017587900 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.017705917 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.018748045 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.018815994 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.018857956 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.018902063 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.019232988 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.019334078 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.019359112 CET	443	49968	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.019496918 CET	49968	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.019962072 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:45.019993067 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:45.155998945 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:45.156039000 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:45.156307936 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:45.156548023 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:45.156562090 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:45.159408092 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:45.159478903 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:45.159567118 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:45.159789085 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:45.159821987 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:45.710566044 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:45.711196899 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:45.711226940 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:45.712008953 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:45.712013960 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:45.995296955 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:45.995928049 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:45.996000051 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:45.996488094 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:45.996503115 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.098392963 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.099042892 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.099122047 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.099535942 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.099550962 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.100914001 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.101448059 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.101489067 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.101910114 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.101931095 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.149106979 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.149189949 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.149313927 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.149775028 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.149816036 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.149898052 CET	49969	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.149914980 CET	443	49969	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.153139114 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.153182030 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.153311968 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.153512955 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.153531075 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.272583008 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.273195982 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.273264885 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.273729086 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.273736000 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.482933998 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.483026028 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.483127117 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.483305931 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.483366013 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.483417034 CET	49970	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.483433962 CET	443	49970	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.485863924 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.485901117 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.485976934 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.486257076 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.486282110 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.558902025 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.558991909 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.559046984 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.559364080 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.559407949 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.559448957 CET	49971	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.559465885 CET	443	49971	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.559698105 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.559863091 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.560064077 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.560697079 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.560746908 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.560777903 CET	49972	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.560794115 CET	443	49972	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.563867092 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.563909054 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.563971043 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.564097881 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.564111948 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.564232111 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.564320087 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.564420938 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.564527988 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.564558983 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.726922989 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.727082014 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.727274895 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.727519989 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.727519989 CET	49973	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.727547884 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.727560043 CET	443	49973	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.729823112 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.730108976 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.730134964 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.730490923 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.730526924 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.730539083 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.730593920 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.730638027 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.730815887 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:46.730837107 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:46.731249094 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.731479883 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.731610060 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.731676102 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.731801033 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.731810093 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:46.783610106 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:46.856571913 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.857016087 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:46.857029915 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.858253956 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.859105110 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:46.859231949 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:46.859246969 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.859282017 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:46.859287977 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.859426975 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:46.905318022 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:46.999155045 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:46.999373913 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:46.999393940 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:46.999752998 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:46.999810934 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:47.000742912 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.000816107 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:47.009819984 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:47.009979963 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.010072947 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:47.010080099 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.010199070 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:47.010242939 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.533242941 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.533288002 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.537496090 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.537516117 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.537802935 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.537842989 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.537991047 CET	443	49974	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.538001060 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.538105965 CET	49974	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.592736006 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:47.595256090 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:47.595350027 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:47.597604990 CET	49982	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.597606897 CET	49976	443	192.168.2.4	172.217.19.238
Nov 20, 2024 21:19:47.597644091 CET	443	49976	172.217.19.238	192.168.2.4
Nov 20, 2024 21:19:47.597650051 CET	443	49982	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.597771883 CET	49982	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.597965002 CET	49982	443	192.168.2.4	172.217.19.206
Nov 20, 2024 21:19:47.597990036 CET	443	49982	172.217.19.206	192.168.2.4
Nov 20, 2024 21:19:47.937359095 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.940088034 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:47.940619946 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:47.940644979 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:47.941294909 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:47.941301107 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:47.943470955 CET	443	49975	142.250.181.14	192.168.2.4
Nov 20, 2024 21:19:47.943536043 CET	49975	443	192.168.2.4	142.250.181.14
Nov 20, 2024 21:19:48.247796059 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.248734951 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.248734951 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.248761892 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.248774052 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.355868101 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.356472969 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.356550932 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.357079029 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.357094049 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.384855032 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.384937048 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.385107040 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.385147095 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.385147095 CET	49977	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.385169029 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.385178089 CET	443	49977	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.387940884 CET	49983	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.388000011 CET	443	49983	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.388169050 CET	49983	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.388221025 CET	49983	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.388231993 CET	443	49983	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.466075897 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.466555119 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.466588020 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.466799021 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.466805935 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.499497890 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.500305891 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.500305891 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.500330925 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.500341892 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.683909893 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.684081078 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.684186935 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.684186935 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.684468031 CET	49978	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.684499979 CET	443	49978	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.686597109 CET	49984	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.686649084 CET	443	49984	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.686871052 CET	49984	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.686871052 CET	49984	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.686912060 CET	443	49984	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.799812078 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.799971104 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.800102949 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.800102949 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.802120924 CET	49980	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.802155972 CET	443	49980	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.802807093 CET	49985	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.802855968 CET	443	49985	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.802973986 CET	49985	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.803127050 CET	49985	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.803157091 CET	443	49985	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.902034998 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.902193069 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.902311087 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.902311087 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.903779984 CET	49981	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.903800011 CET	443	49981	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.904814005 CET	49986	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.904843092 CET	443	49986	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.905272961 CET	49986	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.905272961 CET	49986	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.905297041 CET	443	49986	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.951575994 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.951755047 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.951842070 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.951843023 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.953968048 CET	49979	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.953973055 CET	49987	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.953984976 CET	443	49979	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.954031944 CET	443	49987	13.107.246.63	192.168.2.4
Nov 20, 2024 21:19:48.954142094 CET	49987	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.954279900 CET	49987	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:19:48.954303980 CET	443	49987	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 21:18:28.642617941 CET	53	49744	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:28.660289049 CET	53	49235	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:29.940123081 CET	57244	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:29.940320969 CET	51937	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:30.077820063 CET	53	57244	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:30.077876091 CET	53	51937	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:31.417794943 CET	53	52655	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:31.834661961 CET	49354	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:31.835057974 CET	64172	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:31.971923113 CET	53	49354	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:31.974462032 CET	53	64172	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:32.779385090 CET	58305	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:32.779532909 CET	54490	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:32.919760942 CET	53	58305	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:32.920027018 CET	53	54490	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:35.247932911 CET	53	63127	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:35.320614100 CET	50217	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:35.320868969 CET	58353	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:35.476742029 CET	53	50217	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:35.477210999 CET	53	58353	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:40.098289013 CET	53	54872	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:40.146155119 CET	59037	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:40.146511078 CET	56463	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:40.282655954 CET	53	59216	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:40.283139944 CET	53	59037	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:40.298851967 CET	53	56463	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:43.624115944 CET	53	61841	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:44.040189981 CET	62301	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:44.040359974 CET	54203	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:44.189019918 CET	53	54203	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:44.189038038 CET	53	62301	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:45.612299919 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 21:18:48.025266886 CET	58302	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:48.025628090 CET	50258	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:48.166003942 CET	53	50258	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:48.180643082 CET	53	58302	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:48.504828930 CET	53	53909	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:49.285106897 CET	49919	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:49.285407066 CET	53060	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:18:49.422543049 CET	53	49919	1.1.1.1	192.168.2.4
Nov 20, 2024 21:18:49.422561884 CET	53	53060	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:05.090842962 CET	63232	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:05.091002941 CET	49346	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:05.233824015 CET	53	49346	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:05.233861923 CET	53	63232	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:07.338377953 CET	53	53446	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:19.066417933 CET	63763	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:19.066535950 CET	62185	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:19.203536034 CET	53	62185	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:19.203851938 CET	53	63763	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:21.784349918 CET	53	54493	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:28.243736982 CET	53	53858	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:30.214257956 CET	53	50065	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:31.641200066 CET	65359	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:31.641467094 CET	64503	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:31.781929970 CET	53	65359	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:31.783056974 CET	53	64503	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:32.226939917 CET	53	56468	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:45.016486883 CET	56989	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:45.016486883 CET	57401	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:45.017386913 CET	49276	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:45.017530918 CET	54804	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:19:45.154288054 CET	53	49276	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:45.154323101 CET	53	57401	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:45.155531883 CET	53	54804	1.1.1.1	192.168.2.4
Nov 20, 2024 21:19:45.158914089 CET	53	56989	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 21:18:29.940123081 CET	192.168.2.4	1.1.1.1	0x64cb	Standard query (0)	forms.gle	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:29.940320969 CET	192.168.2.4	1.1.1.1	0x195	Standard query (0)	forms.gle	65	IN (0x0001)	false
Nov 20, 2024 21:18:31.834661961 CET	192.168.2.4	1.1.1.1	0x601f	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:31.835057974 CET	192.168.2.4	1.1.1.1	0xe1d9	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:32.779385090 CET	192.168.2.4	1.1.1.1	0xba98	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:32.779532909 CET	192.168.2.4	1.1.1.1	0x4fe1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:35.320614100 CET	192.168.2.4	1.1.1.1	0x259f	Standard query (0)	lh4.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:35.320868969 CET	192.168.2.4	1.1.1.1	0x1b94	Standard query (0)	lh4.googleusercontent.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:40.146155119 CET	192.168.2.4	1.1.1.1	0x7def	Standard query (0)	lh4.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:40.146511078 CET	192.168.2.4	1.1.1.1	0x652	Standard query (0)	lh4.googleusercontent.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:44.040189981 CET	192.168.2.4	1.1.1.1	0x2b19	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:44.040359974 CET	192.168.2.4	1.1.1.1	0xb053	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:48.025266886 CET	192.168.2.4	1.1.1.1	0x9e56	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:48.025628090 CET	192.168.2.4	1.1.1.1	0x3113	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:18:49.285106897 CET	192.168.2.4	1.1.1.1	0xa48c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:49.285407066 CET	192.168.2.4	1.1.1.1	0x4984	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:19:05.090842962 CET	192.168.2.4	1.1.1.1	0x693b	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:05.091002941 CET	192.168.2.4	1.1.1.1	0x8a83	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Nov 20, 2024 21:19:19.066417933 CET	192.168.2.4	1.1.1.1	0x82b2	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:19.066535950 CET	192.168.2.4	1.1.1.1	0xdae1	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Nov 20, 2024 21:19:31.641200066 CET	192.168.2.4	1.1.1.1	0x62bd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:31.641467094 CET	192.168.2.4	1.1.1.1	0xb942	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:19:45.016486883 CET	192.168.2.4	1.1.1.1	0x9712	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:45.016486883 CET	192.168.2.4	1.1.1.1	0x4289	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:19:45.017386913 CET	192.168.2.4	1.1.1.1	0x7e5f	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:45.017530918 CET	192.168.2.4	1.1.1.1	0x7c80	Standard query (0)	docs.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 21:18:30.077820063 CET	1.1.1.1	192.168.2.4	0x64cb	No error (0)	forms.gle		199.36.158.100	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:31.971923113 CET	1.1.1.1	192.168.2.4	0x601f	No error (0)	docs.google.com		142.250.181.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:32.919760942 CET	1.1.1.1	192.168.2.4	0xba98	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:32.920027018 CET	1.1.1.1	192.168.2.4	0x4fe1	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 21:18:35.476742029 CET	1.1.1.1	192.168.2.4	0x259f	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:18:35.476742029 CET	1.1.1.1	192.168.2.4	0x259f	No error (0)	googlehosted.l.googleusercontent.com		172.217.19.225	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:35.477210999 CET	1.1.1.1	192.168.2.4	0x1b94	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:18:40.283139944 CET	1.1.1.1	192.168.2.4	0x7def	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:18:40.283139944 CET	1.1.1.1	192.168.2.4	0x7def	No error (0)	googlehosted.l.googleusercontent.com		172.217.19.225	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:40.298851967 CET	1.1.1.1	192.168.2.4	0x652	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:18:44.189038038 CET	1.1.1.1	192.168.2.4	0x2b19	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:48.180643082 CET	1.1.1.1	192.168.2.4	0x9e56	No error (0)	docs.google.com		142.250.181.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:18:49.422543049 CET	1.1.1.1	192.168.2.4	0xa48c	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:05.233861923 CET	1.1.1.1	192.168.2.4	0x693b	No error (0)	csp.withgoogle.com		172.217.17.49	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:19.203536034 CET	1.1.1.1	192.168.2.4	0xdae1	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:19:19.203851938 CET	1.1.1.1	192.168.2.4	0x82b2	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:19:19.203851938 CET	1.1.1.1	192.168.2.4	0x82b2	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:31.781929970 CET	1.1.1.1	192.168.2.4	0x62bd	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:31.783056974 CET	1.1.1.1	192.168.2.4	0xb942	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 21:19:45.154288054 CET	1.1.1.1	192.168.2.4	0x7e5f	No error (0)	docs.google.com		142.250.181.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:19:45.158914089 CET	1.1.1.1	192.168.2.4	0x9712	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

forms.gle

docs.google.com

fs.microsoft.com

https:

lh4.googleusercontent.com

play.google.com

accounts.youtube.com

www.google.com

slscr.update.microsoft.com

csp.withgoogle.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	199.36.158.100	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:31 UTC	669	OUT	GET /PP1myaVZHGwAABJ89 HTTP/1.1 Host: forms.gle Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:18:31 UTC	1207	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: script-src 'report-sample' 'nonce-u-6Ig3izrfctmz0XiL41cQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist,require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Content-Type: application/binary Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form
2024-11-20 20:18:31 UTC	551	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 61 72 63 68 3d 2a 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 2d 6c 69 73 74 3d 2a 2c 20 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 2a 2c 20 63 68 2d 75 61 2d 77 6f 77 36 34 3d 2a 2c 20 63 68 2d 75 61 2d 66 6f 72 6d 2d 66 61 63 74 6f 72 73 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 30 20 4e 6f 76 20 32 Data Ascii: Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Pragma: no-cacheAccept-Ranges: bytesDate: Wed, 20 Nov 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:33 UTC	747	OUT	GET /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form HTTP/1.1 Host: docs.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:18:35 UTC	3714	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:18:34 GMT Content-Security-Policy-Report-Only: report-uri https://csp.withgoogle.com/csp/forms/prod;frame-ancestors 'none' P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-wysOH34vsdv64Dxc_wT2yQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Reporting-Endpoints: default="/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/web-reports?bl=apps-forms.freebird_20241112.02_p2&clss=1&context=eJwNy39M1HUcx_GPn-_n_UXhOPnRbKmjgeYWToTLJVM7xOMuuEwUgg-bkKIcyx8IngzS_JWzZOahU0GjEccPlTi-jtRbUjEph6mNzXSWab8kf96d4iEnP0yu1x-P7fnPM_RBaIBJ1jBeMi1MsqFwyZojJIuJkqxnkmSzXpZsy2uSzZwl2cEEyUrnSLZnkWRH4apZsj74rVCy-zChSLJXYLBEMrFBsu3lklVD8RbJKuDGTskeQLJDsnT4_YBkDyGnRjIbjB2VTP-5ZLEXJEuCi1fwgGdQslGoCEj2KXRMyWPd8HZMHpNQkpHHtsGz1718DIL5fh5S4OfGD_zcAtp5P3dD_-0BPgS-nKd8EIIJAR4yO8C1xAB3w_qdAV4Oyq4ADwP_uiE-AvTWMA-HO-CDPtsw98COvcN8D4xdGuHq5RH-WdQoPwQxjaN8BnRnjfGLEMqCPAruTA1yH-RtDvKVUL0lyGshv2WcUgSlDq5UQqaTKxLie7higEpFUXbA1D2KMh2q7ypKLSztnyfyIMczXxTAocB88QXcPLJA9MEEbYGIhBlvGEUC6G1GMQmslCKyYMmlFJELVemp4gA4rKmiBkofpYpKeM-1SORDT_si0QuaziTc4DCaRA18VWYSX0NmhUlIiO8wCQPUnDKJenjoNgk_ZHhNYhl0-U2iB0Zj0wSPSxNFj9NEOSyMNIul8DjWLMbg35lm4YX2NWZxBno2mkUvXOkyixvw4J5ZPIGAziJegDnOIuwwZaVFTIPYDy0iCa7tt4hbYM5MFzmQnZsulsPA9XQRFp0homFBiFWkwZJQq8iFzOwGklD-TQNthZcGGmg6bLM56RNoaHbSCXCcc1INFAw6y [TRUNCATED] Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk; expires=Thu, 22-May-2025 20:18:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; Domain=.docs.google.com; Expires=Wed, 20-Nov-2024 21:18:34 GMT; Path=/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g; Secure; HttpOnly; Priority=LOW; SameSite=none Set-Cookie: COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; Domain=.docs.google.com; Expires=Wed, 20-Nov-2024 21:18:34 GMT; Path=/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g; Secure; HttpOnly; Priority=LOW; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 36 39 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 48 42 31 65 43 64 2d 55 4d 72 6e 6d 62 20 50 48 4f 63 56 62 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 73 70 72 65 61 64 73 68 65 65 74 73 2f 66 6f 72 6d 73 2f 66 61 76 69 63 6f 6e 5f 71 70 32 2e 70 6e 67 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 2b 45 78 74 65 Data Ascii: 6980<!DOCTYPE html><html lang="en" class="HB1eCd-UMrnmb PHOcVb"><head><link rel="shortcut icon" sizes="16x16" href="https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png"><link href="https://fonts.googleapis.com/icon?family=Material+Icons+Exte
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 6f 74 28 2e 52 44 50 5a 45 29 3a 66 6f 63 75 73 20 3e 20 2e 4d 62 68 55 7a 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 30 33 2c 20 35 38 2c 20 31 38 33 2c 20 30 2e 31 35 29 3b 7d 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 49 64 35 56 31 2c 20 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 6e 51 4f 72 45 62 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 33 2c 20 35 38 2c 20 31 38 33 29 3b 7d 2e 45 43 76 42 52 62 20 2e 52 44 50 5a 45 3a 6e 6f 74 28 2e 4e 32 52 70 42 65 29 20 2e 49 64 35 56 31 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 39 41 41 30 41 36 3b 7d 2e 64 61 38 62 6d 64 20 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 Data Ascii: ot(.RDPZE):focus > .MbhUzd {background-color: rgba(103, 58, 183, 0.15);}.ECvBRb .N2RpBe.RDPZE .Id5V1, .ECvBRb .N2RpBe.RDPZE .nQOrEb {border-color: rgb(103, 58, 183);}.ECvBRb .RDPZE:not(.N2RpBe) .Id5V1 {border-color: #9AA0A6;}.da8bmd .ECvBRb .N2RpBe.RDPZE
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 37 29 3b 7d 2e 46 6c 77 4e 77 2e 75 33 62 57 34 65 20 2e 6f 4a 65 57 75 66 3a 62 65 66 6f 72 65 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 33 2c 20 35 38 2c 20 31 38 33 29 3b 7d 2e 46 6c 77 4e 77 20 2e 7a 48 51 6b 42 66 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 66 6f 63 75 73 20 7e 20 2e 73 6e 42 79 61 63 20 7b 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 33 2c 20 35 38 2c 20 31 38 33 29 3b 7d 2e 79 71 51 53 31 20 2e 63 58 72 64 71 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 33 2c 20 35 38 2c 20 31 38 33 29 3b 7d 2e 79 71 51 53 31 20 2e 49 73 37 46 68 62 20 7b 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 33 2c 20 35 38 2c 20 31 38 33 29 3b 7d 2e 79 71 51 53 31 2e 49 59 65 77 72 20 2e 6f 4a 65 57 75 Data Ascii: 7);}.FlwNw.u3bW4e .oJeWuf:before {border-color: rgb(103, 58, 183);}.FlwNw .zHQkBf:not([disabled]):focus ~ .snByac {color: rgb(103, 58, 183);}.yqQS1 .cXrdqd {background-color: rgb(103, 58, 183);}.yqQS1 .Is7Fhb {color: rgb(103, 58, 183);}.yqQS1.IYewr .oJeWu
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 2c 20 2e 4f 49 43 39 30 63 20 2e 73 6e 42 79 61 63 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 7d 2e 4f 49 43 39 30 63 20 2e 6f 4a 65 57 75 66 20 2e 7a 48 51 6b 42 66 20 7b 7d 2e 73 49 64 30 43 65 2c 20 2e 73 49 64 30 43 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 36 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 68 72 65 66 3d 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 66 6f 72 6d 73 2f 64 65 76 69 63 65 5f 68 6f 6d 65 2f 61 6e 64 72 6f 69 64 5f 31 39 32 2e 70 6e 67 22 3e 3c 6c 69 Data Ascii: , .OIC90c .snByac {font-size: 11pt; line-height: 15pt;letter-spacing: 0;}.OIC90c .oJeWuf .zHQkBf {}.sId0Ce, .sId0Ce a {color: rgba(0, 0, 0, 0.66);}</style><link rel="icon" sizes="192x192" href="//ssl.gstatic.com/docs/forms/device_home/android_192.png"><li
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 35 33 34 2c 37 31 36 33 39 35 35 30 2c 37 31 36 34 32 30 38 33 2c 37 31 36 34 32 30 39 31 2c 37 31 36 35 37 39 30 30 2c 37 31 36 35 37 39 30 38 2c 37 31 36 35 39 39 37 33 2c 37 31 36 35 39 39 38 31 2c 37 31 36 37 39 34 34 30 2c 37 31 36 37 39 34 34 38 2c 37 31 36 38 39 39 36 30 2c 37 31 36 38 39 39 36 38 2c 37 31 36 39 39 37 30 31 2c 37 31 36 39 39 37 30 39 2c 37 31 37 30 35 31 35 37 2c 37 31 37 30 35 32 30 32 2c 37 31 37 32 30 39 38 37 2c 37 31 37 32 30 39 39 35 2c 37 31 37 32 37 31 33 37 2c 37 31 37 32 37 31 35 33 2c 37 31 37 33 33 32 30 33 2c 37 31 37 33 33 32 31 31 2c 37 31 38 34 37 37 34 39 2c 37 31 38 34 37 37 36 35 2c 37 31 38 34 39 35 35 35 2c 37 31 38 34 39 35 36 33 2c 37 31 38 38 32 32 32 36 2c 37 31 38 39 37 38 36 37 2c 37 31 38 39 37 38 37 35 Data Ascii: 534,71639550,71642083,71642091,71657900,71657908,71659973,71659981,71679440,71679448,71689960,71689968,71699701,71699709,71705157,71705202,71720987,71720995,71727137,71727153,71733203,71733211,71847749,71847765,71849555,71849563,71882226,71897867,71897875
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 34 39 39 34 33 31 37 39 2c 37 31 36 37 39 34 34 30 2c 35 30 34 39 38 39 32 37 2c 35 30 34 33 39 32 36 30 2c 37 31 35 30 33 30 32 31 2c 39 34 33 39 37 38 32 31 2c 39 34 34 38 39 39 31 38 2c 39 39 32 33 37 36 30 31 2c 37 31 36 35 39 39 37 33 2c 37 31 35 36 31 36 36 31 2c 34 39 38 32 32 39 38 31 2c 34 39 34 37 31 39 38 33 2c 31 30 31 37 30 38 34 38 33 2c 37 31 30 37 39 38 39 38 2c 34 39 35 30 31 36 37 36 2c 37 31 35 37 34 30 31 30 2c 37 31 36 34 32 30 38 33 2c 37 31 35 34 36 33 34 35 2c 34 39 33 37 35 32 39 34 2c 31 30 31 35 31 39 32 34 30 2c 34 39 33 37 32 34 31 35 2c 34 39 38 33 33 34 34 32 2c 39 34 39 30 34 32 34 39 2c 39 34 36 36 37 34 30 35 2c 37 31 32 38 39 31 36 36 2c 39 39 34 33 37 32 36 31 2c 37 31 30 33 35 34 37 37 2c 39 34 34 33 35 36 33 38 2c 31 Data Ascii: 49943179,71679440,50498927,50439260,71503021,94397821,94489918,99237601,71659973,71561661,49822981,49471983,101708483,71079898,49501676,71574010,71642083,71546345,49375294,101519240,49372415,49833442,94904249,94667405,71289166,99437261,71035477,94435638,1
2024-11-20 20:18:35 UTC	3714	IN	Data Raw: 70 43 61 22 2c 22 5a 37 76 61 62 51 7a 5a 30 42 6e 33 67 62 57 34 41 63 5a 43 30 54 66 76 6d 53 61 62 22 5d 2c 22 64 6f 63 73 2d 68 75 6e 64 73 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 68 61 65 22 3a 22 50 52 4f 44 22 2c 22 64 6f 63 73 2d 65 68 6e 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 61 70 69 2d 6b 65 79 73 22 3a 7b 22 73 63 6f 6e 65 5f 61 70 69 5f 6b 65 79 22 3a 22 41 49 7a 61 53 79 41 50 36 36 79 77 38 51 6e 50 65 34 43 67 62 51 6d 4c 4a 31 70 6f 74 73 72 70 70 6e 69 6e 58 78 73 22 2c 22 77 6f 72 6b 73 70 61 63 65 5f 75 69 5f 61 70 69 5f 6b 65 79 22 3a 22 41 49 7a 61 53 79 41 47 75 36 35 79 4f 73 44 71 4e 6b 59 46 6c 55 54 39 36 4d 31 69 36 42 73 79 48 34 4e 6c 36 2d 73 22 2c 22 65 73 70 72 65 73 73 6f 5f 61 70 69 5f 6b 65 79 22 3a 22 41 49 7a 61 Data Ascii: pCa","Z7vabQzZ0Bn3gbW4AcZC0TfvmSab"],"docs-hunds":false,"docs-hae":"PROD","docs-ehn":false,"docs-api-keys":{"scone_api_key":"AIzaSyAP66yw8QnPe4CgbQmLJ1potsrppninXxs","workspace_ui_api_key":"AIzaSyAGu65yOsDqNkYFlUT96M1i6BsyH4Nl6-s","espresso_api_key":"AIza
2024-11-20 20:18:35 UTC	1018	IN	Data Raw: 66 61 6c 73 65 2c 22 64 6f 63 73 2d 61 6e 64 64 63 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 61 64 6e 64 6c 64 63 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 64 68 6e 61 70 22 3a 22 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 64 73 22 3a 22 68 74 74 70 73 22 2c 22 64 6f 63 73 2d 65 6d 6d 64 61 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 63 6c 69 62 73 22 3a 31 2c 22 64 6f 63 73 2d 63 69 72 74 73 22 3a 32 30 30 30 30 2c 22 64 6f 63 73 2d 63 69 64 65 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 63 6e 22 3a 22 22 2c 22 64 6f 63 73 2d 64 70 72 66 6f 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 64 6f 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 61 63 72 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 61 63 77 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d Data Ascii: false,"docs-anddc":true,"docs-adndldc":false,"docs-dhnap":"docs.google.com","docs-ds":"https","docs-emmda":false,"docs-clibs":1,"docs-cirts":20000,"docs-cide":true,"docs-cn":"","docs-dprfo":false,"docs-dom":false,"docs-eacr":false,"docs-eacw":false,"docs-
2024-11-20 20:18:35 UTC	1390	IN	Data Raw: 36 38 36 0d 0a 63 77 69 64 75 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 68 6d 67 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 69 70 6d 6d 70 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 69 70 75 76 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 6f 65 73 66 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 6f 75 72 73 66 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 70 6c 69 6d 69 66 22 3a 32 30 2e 30 2c 22 64 6f 63 73 2d 73 72 6d 6f 65 22 3a 30 2e 30 2c 22 64 6f 63 73 2d 73 72 6d 6f 75 72 22 3a 30 2e 30 2c 22 64 6f 63 73 2d 73 72 6d 77 65 22 3a 30 2e 30 31 2c 22 64 6f 63 73 2d 73 70 74 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 73 73 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 73 6c 69 6e 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 75 6f 63 69 22 3a 22 22 2c 22 64 6f 63 73 2d 77 65 73 Data Ascii: 686cwidu":false,"docs-hmg":false,"docs-ipmmp":true,"docs-ipuv":true,"docs-oesf":false,"docs-oursf":false,"docs-plimif":20.0,"docs-srmoe":0.0,"docs-srmour":0.0,"docs-srmwe":0.01,"docs-sptm":true,"docs-ssi":false,"docs-eslin":true,"docs-uoci":"","docs-wes
2024-11-20 20:18:35 UTC	287	IN	Data Raw: 72 69 76 65 66 72 6f 6e 74 65 6e 64 2d 70 61 2e 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 63 70 61 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6f 70 6c 65 2d 70 61 2e 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 2c 22 64 6f 63 73 2d 63 62 61 75 22 3a 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 63 66 72 75 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 68 33 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 63 74 61 6b 22 3a 22 41 49 7a 61 53 79 41 57 47 72 66 43 43 72 37 61 6c 62 4d 33 6c 6d 43 63 39 33 37 67 78 34 75 49 70 68 62 70 65 4b 51 22 2c 22 64 6f 63 73 2d 63 67 61 76 22 3a 30 2c 22 64 6f 63 73 2d 63 63 69 22 3a 32 2c 22 64 6f 63 73 2d 67 Data Ascii: rivefrontend-pa.clients6.google.com","docs-cpari":"https://people-pa.clients6.google.com/","docs-cbau":"https://drive.google.com","docs-cfru":"https://lh3.google.com","docs-ctak":"AIzaSyAWGrfCCr7albM3lmCc937gx4uIphbpeKQ","docs-cgav":0,"docs-cci":2,"docs-g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 20:18:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=246416 Date: Wed, 20 Nov 2024 20:18:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 20:18:37 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246373 Date: Wed, 20 Nov 2024 20:18:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 20:18:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	172.217.19.225	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:37 UTC	857	OUT	GET /nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600 HTTP/1.1 Host: lh4.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:18:38 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 21 Nov 2024 20:18:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="d7b7d7932e3e3b7fb9f07babc1705eac.jpg" X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 20:18:38 GMT Server: fife Content-Length: 687032 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:18:38 UTC	842	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 d8 00 d8 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 03 84 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF"ExifMM*CC@"
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 2f fb d0 5d 45 2f fe cb 5f 3b c5 54 f9 f2 aa a9 76 b9 e9 e4 b5 39 31 f4 a4 fb fe 67 cc 9f f0 45 ef 10 35 9f c5 1f 8a ba 3a b7 ee b5 8f 0a c1 7b b7 fd a8 2e a2 ff 00 d9 25 af bc 3c bf 36 bf 37 7f e0 90 1e 24 5b 3f db 4a d6 c5 9b 62 f8 93 c2 ba 9d 92 ff 00 b6 de 57 9a ab ff 00 90 ab f4 91 36 ec af 1f c3 fa 9c d9 64 a1 da 4c f5 78 c2 9f 2e 3d 49 76 47 0d f1 bf f6 cc d6 bf 66 f7 b3 d1 7c 1f e1 9f 16 b7 8a ae 64 82 e1 af 9a 2f dc df c4 d2 ec 58 ac f6 ef 76 67 fb ae df 2f f1 d7 01 e2 0f 07 2f c6 af da 37 c3 da 67 c5 08 d7 e1 fe b7 e3 28 af b5 06 f1 3d f4 31 2d ce 89 f6 e6 95 27 d2 e5 83 ee c1 e5 4b e7 ae df f6 2b e8 5d 1e f1 a4 d4 b4 b8 e6 df 71 15 85 f2 de db 44 cc bb 12 75 fb ad ff 00 00 dd ba bc 47 e2 2f ed 61 1d c7 c7 bf 8d 2b e0 d8 ee 35 6d 4b c3 1e 13 96 Data Ascii: /]E/_;Tv91gE5:{.%<67$[?JbW6dLx.=IvGf\|d/Xvg//7g(=1-'K+]qDuG/a+5mK
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 19 60 8b ec b7 9f e9 4b e5 2c 5b 3c d8 ad 5b 67 95 bf 7b 33 d5 1f 1b 7c 2b bc f8 b9 f0 db 41 f8 6b 71 a3 ad 86 bd e1 2d 42 ea 2d 5f fb 72 f2 d6 f9 ee 5a fd 91 3c 88 25 b5 95 e2 f3 7e d4 bb 91 62 da 91 6f 97 75 63 99 7d 77 25 c9 e9 d2 c5 ae 5a 73 69 73 6f 74 96 f2 d7 e2 e9 7e af cb 53 0c 36 23 0f 5a b4 a9 ef 28 fe bb 9d 07 ec f5 e0 3f 88 17 9e 23 fb 67 86 63 d3 74 3d 0e c2 c6 eb 5a 83 c6 36 36 2b a0 eb 9a f6 dd fe 6d 84 53 b3 6f 8a 27 4f dd 4b 3a 26 c4 7d 9e 53 fc d5 cf f8 bf e0 e7 c4 6f 09 f8 76 c2 3b ad 4a f3 41 b1 f1 85 e3 5d f8 eb 53 bb f1 2f f6 f6 9f a0 e9 cd 2b bd ad aa 4b b9 de 55 4d cb e6 ac 5b ff 00 bc cf f7 eb 99 f8 cd f1 03 5c fd 9e ff 00 68 ad 27 52 f1 77 c3 9f 18 78 8f c3 89 13 78 3d bc 1d a8 4b 3d c4 33 59 c0 9b 62 82 2d ad be 0f de b7 da 93 Data Ascii: `K,[<[g{3\|+Akq-B-_rZ<%~bouc}w%Zsisot~S6#Z(?#gct=Z66+mSo'OK:&}Sov;JA]S/+KUM[\h'Rwxx=K=3Yb-
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 2c 50 2f dc 5b 39 62 69 55 f6 7c 9b f6 b7 f0 57 ce 7e 20 f1 7f 88 f4 0b 37 f0 e5 bc 9a 95 c7 87 bc 7d 3f ef f4 d9 22 ff 00 41 b8 b9 8b ee ba b7 f1 4b 17 c9 f7 2b e8 0f da d3 e3 46 a5 f1 83 e1 06 93 ad 69 f1 c5 7d f0 e7 c3 da af fc 23 9a 45 8f 88 ee 7f e2 67 ac 4f 6b 04 4d 75 aa 34 52 3b dc 79 b2 bc ed bd 5d f6 22 6c fe 3a f0 6b 4f 8e be 28 f8 27 e3 6f 0f c7 a6 cd 05 86 97 61 aa dd 78 83 45 8a 08 3e d1 0e 8e d7 8a 89 e6 c1 f3 6f 5f f5 51 7c bf ec 57 df 60 63 56 57 a9 52 29 49 df 4b fe ba d9 f7 56 b5 ce 2a b2 d7 43 97 1e 38 d2 e4 d1 34 1b 5f 0b f8 67 47 b5 d4 74 19 1a 5b eb cd 4a 56 bb 9b 5b 66 6f f5 4f 17 ca 8b 6f fc 3b 2b d6 ed ff 00 6f cb bf 12 7c 1e f1 17 80 6f 3e 14 fc 3f d3 d7 51 d4 22 d4 2d 25 d0 ec 9a d2 d3 4e 5d ff 00 bd 89 ad 77 32 48 92 ee 6f 9b Data Ascii: ,P/[9biU\|W~ 7}?"AK+Fi}#EgOkMu4R;y]"l:kO('oaxE>o_Q\|W`cVWR)IKV*C84_gGt[JV[foOo;+o\|o>?Q"-%N]w2Ho
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 87 3c 23 e6 ea 5a 46 9b ab dd f9 d0 da 35 d4 a9 2b 6d 4f b8 ab 2c ad b9 f6 7f 7e bf 42 7e 26 68 df 0c ff 00 6b 7f 0d f8 0f e1 df 89 3e 24 78 d3 41 ba d1 e5 96 f7 4f be d4 23 89 ec 7e d9 3c bb fc 8d 4f 73 7e e1 92 ca 0f e0 7f f5 b2 ae d4 fb f5 d7 ff 00 c1 3a ff 00 61 9f 09 ea 7e 15 fd ac bc 27 ab 78 f3 c3 1e 1f 8b 5b f0 ae 9d 3e 91 ae 6b 6d 66 ed a6 c1 2a 4b 2b 59 dd 45 3a ec 5d 8e d1 7e f6 27 57 ff 00 6b f8 6b ea 32 7c 66 1d 52 f6 d5 a2 a3 39 2b b4 93 d1 27 6b 5d ad 5d ae fb ea 65 18 fd 84 7c 13 f1 1f fe 0a 11 f1 2b e3 87 c0 bb 3f 04 f8 82 f3 4b d5 b4 5d 37 5e 9f c5 4c d0 59 4b fd ac f7 2d b7 6c af 3a fc ca b6 e8 bb 53 66 cd 88 f5 d1 69 9f b4 8e a1 f0 3f e2 a7 86 bc 45 aa 6b 57 5a b3 eb 1a e2 eb 7a 9e 99 ae 4b 2b cd 61 3e dd ab a8 c1 79 b7 66 d7 46 db fd Data Ascii: <#ZF5+mO,~B~&hk>$xAO#~<Os~:a~'x[>kmf*K+YE:]~'Wkk2\|fR9+'k]]e\|+?K]7^LYK-l:Sfi?EkWZzK+a>yfF
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: db a2 44 de 55 c2 ec 75 7f 95 92 ae 7c 29 ff 00 82 71 fc 0f f1 4f 87 3c 79 af 78 9b e3 f7 82 7c 69 a2 68 57 f2 c1 2f 8a 25 d7 5b 43 5f b5 35 9b cb 12 45 66 d1 4b 71 78 d2 dc 6d f9 93 f8 6d df 6f de df 5c 57 c6 cf db 0a f3 f6 8b fd 9c 7e 15 7c 11 f0 ef 87 6e 2c 7c 2b f0 d5 1a e2 05 d5 75 15 d5 35 0b 9d 45 20 78 a7 58 27 f9 53 ec b2 fd e5 89 d3 e4 f9 36 be ca e0 3f 65 3f 83 f7 9f 10 75 8b 8b 7f 0b e9 7a 26 ad e2 2f 10 cf 06 89 1e 9b aa cf fd 9e 96 cb 75 75 12 45 75 e6 b7 dd 89 1d 59 5d 91 fe 4d e9 5e b5 4c d7 0d 87 4a 11 84 64 92 dd df af 7f f3 3c df 63 88 a9 29 4b 9d c6 ef 65 6d 97 cb a9 93 fb 59 fc 13 f0 ef c0 8f 13 dc 7f c2 15 ff 00 09 94 fa 0c 33 d8 c3 63 a9 eb 6b 05 bd c4 37 2d 67 15 c5 cc 5b 60 66 4d bb a5 47 8a 5f ee 6d a8 26 d0 3c 3f ff 00 08 4d e7 Data Ascii: DUu\|)qO<yx\|ihW/%[C_5EfKqxmmo\W~\|n,\|+u5E xX'S6?e?uz&/uuEuY]M^LJd<c)KemY3ck7-g[`fMG_m&<?M
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 65 bc ff 00 36 e9 20 fe f2 3f df fb b5 e8 5f 0e fe 02 e9 ba 26 93 63 e2 cf 13 78 91 75 19 a6 b3 b3 f3 34 69 6c 56 e2 2b 9d eb b7 ca f9 7e f6 cd de 66 e5 fe ed 79 67 8d 22 f0 ef 8e be 22 c3 a8 68 ba 5f d8 74 9f 37 c8 bc d3 60 87 6a 3a c4 db 77 44 ff 00 f4 d5 2a bd 9d 29 ee ae 53 49 32 cc b1 5f 6b be 03 d4 b5 e9 26 86 4d 06 6b b8 ad f5 3f b3 44 bb ec 2e a5 57 78 99 22 fe eb ed 65 f9 3e e5 6b ea 3e 31 d0 bc 50 fe 13 b7 f1 37 88 26 68 bc 39 67 05 a6 9f a9 7f 62 c4 cf 69 12 c4 d2 b4 4e 9f f2 d5 12 66 db b9 f7 3f de ac 4b fb 0f 0a da 58 78 8e fa 1d 16 e2 d6 0d 6e 07 fe c8 8d af 99 13 41 9f cd 57 db f7 7f 7b f2 2b 2e df f6 ea c7 c3 3f 81 53 fc 65 f8 d5 f0 eb c0 fa 2e a2 b7 9e 28 f1 c5 dd b6 9a d6 9a ac 4d a7 db e9 73 cf 2e c4 56 9f e6 dd 16 dd 8f e6 a2 7f 1d 55 Data Ascii: e6 ?_&cxu4ilV+~fyg""h_t7`j:wD*)SI2_k&Mk?D.Wx"e>k>1P7&h9gbiNf?KXxnAW{+.?Se.(Ms.VU
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 46 13 6d 39 37 2e 5e 8b c9 3e cb c9 d9 fa dc 75 27 1b 37 e8 78 07 c2 1f da 97 c5 9e 1a f8 7d ae fc 37 f0 5f c2 bf 05 df 78 4f c6 11 dd 69 57 3f 65 d3 fc 9b ed 62 26 54 ff 00 8f ab a8 99 d6 57 44 55 7f 93 6e cd f2 ed fb d5 e2 da df 8c b5 6b af 11 dd 6b 9a 8d bc ba 27 fc 24 56 b0 08 bf e1 18 93 ec 50 db 45 6c 9f 67 55 8a 2f e2 5d 8a ca db fe f7 cd fd ea 9b e1 2f c3 df 18 7c 68 f1 87 84 3e 18 e9 36 7a 95 c7 8c b5 e9 e2 b4 f0 b5 8c 53 b5 8b ea 4b 3a b7 95 3f 9a db 76 c5 b5 5b ef ff 00 03 d7 a4 6b 1f f0 4c 6f 8f de 07 f0 65 ae a5 a8 7c 26 d5 34 db 58 7c 47 6d e0 28 20 96 5f b3 dd eb 1a 9c bb f6 b2 ae e7 dc ab f7 19 93 e4 ff 00 c7 eb eb 25 18 ab b6 d2 6f b9 1c bc da a4 79 a6 a5 e1 bd 3f e2 a7 8c 7c 79 7d f0 d7 49 d5 b4 4f 0a f8 67 48 5d 6d 74 ad 57 50 89 ee d6 Data Ascii: Fm97.^>u'7x}7_xOiW?eb&TWDUnkk'$VPElgU/]/\|h>6zSK:?v[kLoe\|&4X\|Gm( _%oy?\|y}IOgH]mtWP
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: ba d4 67 b3 47 8a 3b 3f 36 04 d9 6d 2e c7 57 95 d7 76 c7 44 ac 2f 8d 3f 10 2d ff 00 69 8f 8f bf 0a fe 0f d8 f8 83 43 d6 ec b4 7f 19 ad a6 87 aa e8 7a 0c b6 36 37 96 77 8d 12 4b 3c b6 b2 af 9b 13 23 c4 d1 6e fe e2 7d cd 9b 2b be fd b1 7f e0 ab df 08 7e 25 6a d7 37 1f b3 d7 c2 0d 07 c2 b1 f8 92 cf c9 d7 a3 f1 0e 8d f6 1b 9d 16 f2 2f 96 27 d3 be cf 3f d9 da 5d 9f 3e e7 4f f7 be f5 79 5f ec 93 f0 7a c7 f6 a6 fd a2 3c 2b 79 a0 fc 61 bc f8 63 a9 eb 5a 5e a3 7b af 78 ab 59 78 bc 3d 0e 85 a9 c4 ad e4 5a d9 dc ab 22 dc ca fb a2 66 89 5b ee 3b b5 65 88 f6 93 ab 15 56 36 51 4e ce fa eb d5 84 e3 79 d9 18 3f f0 50 6f 83 7a be 80 fe 34 d5 b5 8d 6b c1 7e 1c d7 bc 0f e2 ed 43 4c d4 34 fb 1d 63 ed 77 1a f4 f7 97 89 70 f0 2d ac 08 c9 12 5a a3 2b 4b 2b be c6 79 91 17 e7 f9 Data Ascii: gG;?6m.WvD/?-iCz67wK<#n}+~%j7/'?]>Oy_z<+yacZ^{xYx=Z"f[;eV6QNy?Poz4k~CL4cwp-Z+K+y
2024-11-20 20:18:38 UTC	1390	IN	Data Raw: 2e ae 34 7f b3 dd 4d ba fa 6f f4 7b 97 f2 17 cd 48 15 be eb 37 f1 56 d8 68 b7 12 a9 d9 8f b6 f1 47 f6 45 e7 db 3e d9 35 8b 6e fd da c0 db df fd da ea fe 17 f8 ce d4 6b 13 fd 8f 49 59 5a 6b 6b c8 a7 8a 7b 55 bb f9 1e 27 f3 5f ee 7c ac 89 fc 5f c1 f7 ab d0 3f 60 cf 81 be 2c f8 f9 fb 59 a6 8d f0 c4 69 ba 1d ad f6 95 7d 6f 71 a8 78 92 28 2e ec ad 2c e7 b3 78 a5 57 df f2 36 f6 de 89 b3 f7 bf 37 cb f7 6b c6 3c 0d f1 7f c4 9f 0c a2 58 7c 3b 7d 71 a2 5d 2e 9f 7d a6 cf 73 6a ed f6 89 a2 ba 4f 22 e5 3f d9 57 8b e4 ff 00 76 ba 65 46 32 56 2b 93 43 d5 fe 1b 7c 63 f0 ad d7 8c 2c f4 bd 6b 49 d1 ee 34 ed 4a c6 5b 2d 56 7f 10 5c cb 71 69 0e e4 db 14 b1 4a bb de 29 62 4f f5 4d b1 be 77 ae 0f 4a f0 bf 86 64 f8 b5 a2 e8 ff 00 db 0c fa 42 2a cb a9 6b 3a 36 e9 a5 b6 db bf cd Data Ascii: .4Mo{H7VhGE>5nkIYZkk{U'_\|_?`,Yi}oqx(.,xW67k<X\|;}q].}sjO"?WveF2V+C\|c,kI4J[-V\qiJ)bOMwJdB*k:6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49760	172.217.19.225	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:42 UTC	582	OUT	GET /nl1n04KxjPDbY7Vx-7YpibJlS819bYV02nHWh40WhAap1LCO1DPC17ye1Y4Mb6vWE2FMD5JenkVnmrc3__6GXO2NroIOhGh7R8qlKLyBBRGTM_n9gYVYTVGd_WVIXjzKNw=w1600 HTTP/1.1 Host: lh4.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:18:42 UTC	556	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="d7b7d7932e3e3b7fb9f07babc1705eac.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 687032 X-XSS-Protection: 0 Date: Wed, 20 Nov 2024 20:18:38 GMT Expires: Thu, 21 Nov 2024 20:18:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/jpeg Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:18:42 UTC	834	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 d8 00 d8 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 03 84 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF"ExifMM*CC@"
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: ed 3f 6a ee 87 c3 cb a8 2f fb d0 5d 45 2f fe cb 5f 3b c5 54 f9 f2 aa a9 76 b9 e9 e4 b5 39 31 f4 a4 fb fe 67 cc 9f f0 45 ef 10 35 9f c5 1f 8a ba 3a b7 ee b5 8f 0a c1 7b b7 fd a8 2e a2 ff 00 d9 25 af bc 3c bf 36 bf 37 7f e0 90 1e 24 5b 3f db 4a d6 c5 9b 62 f8 93 c2 ba 9d 92 ff 00 b6 de 57 9a ab ff 00 90 ab f4 91 36 ec af 1f c3 fa 9c d9 64 a1 da 4c f5 78 c2 9f 2e 3d 49 76 47 0d f1 bf f6 cc d6 bf 66 f7 b3 d1 7c 1f e1 9f 16 b7 8a ae 64 82 e1 af 9a 2f dc df c4 d2 ec 58 ac f6 ef 76 67 fb ae df 2f f1 d7 01 e2 0f 07 2f c6 af da 37 c3 da 67 c5 08 d7 e1 fe b7 e3 28 af b5 06 f1 3d f4 31 2d ce 89 f6 e6 95 27 d2 e5 83 ee c1 e5 4b e7 ae df f6 2b e8 5d 1e f1 a4 d4 b4 b8 e6 df 71 15 85 f2 de db 44 cc bb 12 75 fb ad ff 00 00 dd ba bc 47 e2 2f ed 61 1d c7 c7 bf 8d 2b e0 d8 Data Ascii: ?j/]E/_;Tv91gE5:{.%<67$[?JbW6dLx.=IvGf\|d/Xvg//7g(=1-'K+]qDuG/a+
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: 3e 0e d5 6d 1a 1b eb 0b 19 60 8b ec b7 9f e9 4b e5 2c 5b 3c d8 ad 5b 67 95 bf 7b 33 d5 1f 1b 7c 2b bc f8 b9 f0 db 41 f8 6b 71 a3 ad 86 bd e1 2d 42 ea 2d 5f fb 72 f2 d6 f9 ee 5a fd 91 3c 88 25 b5 95 e2 f3 7e d4 bb 91 62 da 91 6f 97 75 63 99 7d 77 25 c9 e9 d2 c5 ae 5a 73 69 73 6f 74 96 f2 d7 e2 e9 7e af cb 53 0c 36 23 0f 5a b4 a9 ef 28 fe bb 9d 07 ec f5 e0 3f 88 17 9e 23 fb 67 86 63 d3 74 3d 0e c2 c6 eb 5a 83 c6 36 36 2b a0 eb 9a f6 dd fe 6d 84 53 b3 6f 8a 27 4f dd 4b 3a 26 c4 7d 9e 53 fc d5 cf f8 bf e0 e7 c4 6f 09 f8 76 c2 3b ad 4a f3 41 b1 f1 85 e3 5d f8 eb 53 bb f1 2f f6 f6 9f a0 e9 cd 2b bd ad aa 4b b9 de 55 4d cb e6 ac 5b ff 00 bc cf f7 eb 99 f8 cd f1 03 5c fd 9e ff 00 68 ad 27 52 f1 77 c3 9f 18 78 8f c3 89 13 78 3d bc 1d a8 4b 3d c4 33 59 c0 9b 62 82 Data Ascii: >m`K,[<[g{3\|+Akq-B-_rZ<%~bouc}w%Zsisot~S6#Z(?#gct=Z66+mSo'OK:&}Sov;JA]S/+KUM[\h'Rwxx=K=3Yb
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: a9 c1 35 f6 82 f1 2a 5d 2c 50 2f dc 5b 39 62 69 55 f6 7c 9b f6 b7 f0 57 ce 7e 20 f1 7f 88 f4 0b 37 f0 e5 bc 9a 95 c7 87 bc 7d 3f ef f4 d9 22 ff 00 41 b8 b9 8b ee ba b7 f1 4b 17 c9 f7 2b e8 0f da d3 e3 46 a5 f1 83 e1 06 93 ad 69 f1 c5 7d f0 e7 c3 da af fc 23 9a 45 8f 88 ee 7f e2 67 ac 4f 6b 04 4d 75 aa 34 52 3b dc 79 b2 bc ed bd 5d f6 22 6c fe 3a f0 6b 4f 8e be 28 f8 27 e3 6f 0f c7 a6 cd 05 86 97 61 aa dd 78 83 45 8a 08 3e d1 0e 8e d7 8a 89 e6 c1 f3 6f 5f f5 51 7c bf ec 57 df 60 63 56 57 a9 52 29 49 df 4b fe ba d9 f7 56 b5 ce 2a b2 d7 43 97 1e 38 d2 e4 d1 34 1b 5f 0b f8 67 47 b5 d4 74 19 1a 5b eb cd 4a 56 bb 9b 5b 66 6f f5 4f 17 ca 8b 6f fc 3b 2b d6 ed ff 00 6f cb bf 12 7c 1e f1 17 80 6f 3e 14 fc 3f d3 d7 51 d4 22 d4 2d 25 d0 ec 9a d2 d3 4e 5d ff 00 bd 89 Data Ascii: 5],P/[9biU\|W~ 7}?"AK+Fi}#EgOkMu4R;y]"l:kO('oaxE>o_Q\|W`cVWR)IKVC84_gGt[JV[foOo;+o\|o>?Q"-%N]
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: 34 d8 f5 ed 6b c5 9a 97 87 3c 23 e6 ea 5a 46 9b ab dd f9 d0 da 35 d4 a9 2b 6d 4f b8 ab 2c ad b9 f6 7f 7e bf 42 7e 26 68 df 0c ff 00 6b 7f 0d f8 0f e1 df 89 3e 24 78 d3 41 ba d1 e5 96 f7 4f be d4 23 89 ec 7e d9 3c bb fc 8d 4f 73 7e e1 92 ca 0f e0 7f f5 b2 ae d4 fb f5 d7 ff 00 c1 3a ff 00 61 9f 09 ea 7e 15 fd ac bc 27 ab 78 f3 c3 1e 1f 8b 5b f0 ae 9d 3e 91 ae 6b 6d 66 ed a6 c1 2a 4b 2b 59 dd 45 3a ec 5d 8e d1 7e f6 27 57 ff 00 6b f8 6b ea 32 7c 66 1d 52 f6 d5 a2 a3 39 2b b4 93 d1 27 6b 5d ad 5d ae fb ea 65 18 fd 84 7c 13 f1 1f fe 0a 11 f1 2b e3 87 c0 bb 3f 04 f8 82 f3 4b d5 b4 5d 37 5e 9f c5 4c d0 59 4b fd ac f7 2d b7 6c af 3a fc ca b6 e8 bb 53 66 cd 88 f5 d1 69 9f b4 8e a1 f0 3f e2 a7 86 bc 45 aa 6b 57 5a b3 eb 1a e2 eb 7a 9e 99 ae 4b 2b cd 61 3e dd ab a8 Data Ascii: 4k<#ZF5+mO,~B~&hk>$xAO#~<Os~:a~'x[>kmf*K+YE:]~'Wkk2\|fR9+'k]]e\|+?K]7^LYK-l:Sfi?EkWZzK+a>
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: 74 be 6d 9d ca b7 95 e6 db a2 44 de 55 c2 ec 75 7f 95 92 ae 7c 29 ff 00 82 71 fc 0f f1 4f 87 3c 79 af 78 9b e3 f7 82 7c 69 a2 68 57 f2 c1 2f 8a 25 d7 5b 43 5f b5 35 9b cb 12 45 66 d1 4b 71 78 d2 dc 6d f9 93 f8 6d df 6f de df 5c 57 c6 cf db 0a f3 f6 8b fd 9c 7e 15 7c 11 f0 ef 87 6e 2c 7c 2b f0 d5 1a e2 05 d5 75 15 d5 35 0b 9d 45 20 78 a7 58 27 f9 53 ec b2 fd e5 89 d3 e4 f9 36 be ca e0 3f 65 3f 83 f7 9f 10 75 8b 8b 7f 0b e9 7a 26 ad e2 2f 10 cf 06 89 1e 9b aa cf fd 9e 96 cb 75 75 12 45 75 e6 b7 dd 89 1d 59 5d 91 fe 4d e9 5e b5 4c d7 0d 87 4a 11 84 64 92 dd df af 7f f3 3c df 63 88 a9 29 4b 9d c6 ef 65 6d 97 cb a9 93 fb 59 fc 13 f0 ef c0 8f 13 dc 7f c2 15 ff 00 09 94 fa 0c 33 d8 c3 63 a9 eb 6b 05 bd c4 37 2d 67 15 c5 cc 5b 60 66 4d bb a5 47 8a 5f ee 6d a8 26 Data Ascii: tmDUu\|)qO<yx\|ihW/%[C_5EfKqxmmo\W~\|n,\|+u5E xX'S6?e?uz&/uuEuY]M^LJd<c)KemY3ck7-g[`fMG_m&
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: 5d 4a e6 59 53 5b 5f 97 65 bc ff 00 36 e9 20 fe f2 3f df fb b5 e8 5f 0e fe 02 e9 ba 26 93 63 e2 cf 13 78 91 75 19 a6 b3 b3 f3 34 69 6c 56 e2 2b 9d eb b7 ca f9 7e f6 cd de 66 e5 fe ed 79 67 8d 22 f0 ef 8e be 22 c3 a8 68 ba 5f d8 74 9f 37 c8 bc d3 60 87 6a 3a c4 db 77 44 ff 00 f4 d5 2a bd 9d 29 ee ae 53 49 32 cc b1 5f 6b be 03 d4 b5 e9 26 86 4d 06 6b b8 ad f5 3f b3 44 bb ec 2e a5 57 78 99 22 fe eb ed 65 f9 3e e5 6b ea 3e 31 d0 bc 50 fe 13 b7 f1 37 88 26 68 bc 39 67 05 a6 9f a9 7f 62 c4 cf 69 12 c4 d2 b4 4e 9f f2 d5 12 66 db b9 f7 3f de ac 4b fb 0f 0a da 58 78 8e fa 1d 16 e2 d6 0d 6e 07 fe c8 8d af 99 13 41 9f cd 57 db f7 7f 7b f2 2b 2e df f6 ea c7 c3 3f 81 53 fc 65 f8 d5 f0 eb c0 fa 2e a2 b7 9e 28 f1 c5 dd b6 9a d6 9a ac 4d a7 db e9 73 cf 2e c4 56 9f e6 dd Data Ascii: ]JYS[_e6 ?_&cxu4ilV+~fyg""h_t7`j:wD*)SI2_k&Mk?D.Wx"e>k>1P7&h9gbiNf?KXxnAW{+.?Se.(Ms.V
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: e2 af 43 86 f2 da 98 18 46 13 6d 39 37 2e 5e 8b c9 3e cb c9 d9 fa dc 75 27 1b 37 e8 78 07 c2 1f da 97 c5 9e 1a f8 7d ae fc 37 f0 5f c2 bf 05 df 78 4f c6 11 dd 69 57 3f 65 d3 fc 9b ed 62 26 54 ff 00 8f ab a8 99 d6 57 44 55 7f 93 6e cd f2 ed fb d5 e2 da df 8c b5 6b af 11 dd 6b 9a 8d bc ba 27 fc 24 56 b0 08 bf e1 18 93 ec 50 db 45 6c 9f 67 55 8a 2f e2 5d 8a ca db fe f7 cd fd ea 9b e1 2f c3 df 18 7c 68 f1 87 84 3e 18 e9 36 7a 95 c7 8c b5 e9 e2 b4 f0 b5 8c 53 b5 8b ea 4b 3a b7 95 3f 9a db 76 c5 b5 5b ef ff 00 03 d7 a4 6b 1f f0 4c 6f 8f de 07 f0 65 ae a5 a8 7c 26 d5 34 db 58 7c 47 6d e0 28 20 96 5f b3 dd eb 1a 9c bb f6 b2 ae e7 dc ab f7 19 93 e4 ff 00 c7 eb eb 25 18 ab b6 d2 6f b9 1c bc da a4 79 a6 a5 e1 bd 3f e2 a7 8c 7c 79 7d f0 d7 49 d5 b4 4f 0a f8 67 48 5d Data Ascii: CFm97.^>u'7x}7_xOiW?eb&TWDUnkk'$VPElgU/]/\|h>6zSK:?v[kLoe\|&4X\|Gm( _%oy?\|y}IOgH]
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: 0e 94 db 35 bf 3d 5d e7 ba d4 67 b3 47 8a 3b 3f 36 04 d9 6d 2e c7 57 95 d7 76 c7 44 ac 2f 8d 3f 10 2d ff 00 69 8f 8f bf 0a fe 0f d8 f8 83 43 d6 ec b4 7f 19 ad a6 87 aa e8 7a 0c b6 36 37 96 77 8d 12 4b 3c b6 b2 af 9b 13 23 c4 d1 6e fe e2 7d cd 9b 2b be fd b1 7f e0 ab df 08 7e 25 6a d7 37 1f b3 d7 c2 0d 07 c2 b1 f8 92 cf c9 d7 a3 f1 0e 8d f6 1b 9d 16 f2 2f 96 27 d3 be cf 3f d9 da 5d 9f 3e e7 4f f7 be f5 79 5f ec 93 f0 7a c7 f6 a6 fd a2 3c 2b 79 a0 fc 61 bc f8 63 a9 eb 5a 5e a3 7b af 78 ab 59 78 bc 3d 0e 85 a9 c4 ad e4 5a d9 dc ab 22 dc ca fb a2 66 89 5b ee 3b b5 65 88 f6 93 ab 15 56 36 51 4e ce fa eb d5 84 e3 79 d9 18 3f f0 50 6f 83 7a be 80 fe 34 d5 b5 8d 6b c1 7e 1c d7 bc 0f e2 ed 43 4c d4 34 fb 1d 63 ed 77 1a f4 f7 97 89 70 f0 2d ac 08 c9 12 5a a3 2b 4b Data Ascii: 5=]gG;?6m.WvD/?-iCz67wK<#n}+~%j7/'?]>Oy_z<+yacZ^{xYx=Z"f[;eV6QNy?Poz4k~CL4cwp-Z+K
2024-11-20 20:18:42 UTC	1390	IN	Data Raw: ff 00 e3 89 5e 7a bf 10 2e ae 34 7f b3 dd 4d ba fa 6f f4 7b 97 f2 17 cd 48 15 be eb 37 f1 56 d8 68 b7 12 a9 d9 8f b6 f1 47 f6 45 e7 db 3e d9 35 8b 6e fd da c0 db df fd da ea fe 17 f8 ce d4 6b 13 fd 8f 49 59 5a 6b 6b c8 a7 8a 7b 55 bb f9 1e 27 f3 5f ee 7c ac 89 fc 5f c1 f7 ab d0 3f 60 cf 81 be 2c f8 f9 fb 59 a6 8d f0 c4 69 ba 1d ad f6 95 7d 6f 71 a8 78 92 28 2e ec ad 2c e7 b3 78 a5 57 df f2 36 f6 de 89 b3 f7 bf 37 cb f7 6b c6 3c 0d f1 7f c4 9f 0c a2 58 7c 3b 7d 71 a2 5d 2e 9f 7d a6 cf 73 6a ed f6 89 a2 ba 4f 22 e5 3f d9 57 8b e4 ff 00 76 ba 65 46 32 56 2b 93 43 d5 fe 1b 7c 63 f0 ad d7 8c 2c f4 bd 6b 49 d1 ee 34 ed 4a c6 5b 2d 56 7f 10 5c cb 71 69 0e e4 db 14 b1 4a bb de 29 62 4f f5 4d b1 be 77 ae 0f 4a f0 bf 86 64 f8 b5 a2 e8 ff 00 db 0c fa 42 2a cb a9 6b Data Ascii: ^z.4Mo{H7VhGE>5nkIYZkk{U'_\|_?`,Yi}oqx(.,xW67k<X\|;}q].}sjO"?WveF2V+C\|c,kI4J[-V\qiJ)bOMwJdB*k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49761	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:44 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XeloF7a++syWelg&MD=VY+gfvar HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 20:18:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 194d86ef-0c82-4aaa-9fb9-79fcc96981fd MS-RequestId: 75fbeb36-ffac-4ad7-8f6b-18e8504be280 MS-CV: 0r70NB8NrU6LVHeu.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 20:18:43 GMT Connection: close Content-Length: 24490
2024-11-20 20:18:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 20:18:44 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49771	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:45 UTC	1432	OUT	POST /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/naLogImpressions HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 5519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform?usp=send_form Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:45 UTC	5519	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 37 33 32 31 33 33 39 32 32 38 34 33 30 30 30 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 37 33 32 31 33 33 39 32 32 38 34 33 30 30 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 37 31 36 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 25 35 44 25 35 44 25 32 43 25 35 42 25 32 32 43 50 57 43 75 74 58 64 36 34 6b 44 46 58 7a 4c 38 67 63 64 45 6a 63 51 79 41 25 32 32 25 32 43 31 37 33 32 31 33 33 39 32 32 38 34 32 30 30 30 25 32 43 31 37 33 32 31 33 33 39 31 34 35 37 35 32 32 30 25 32 43 25 32 32 41 44 46 4e 2d 63 75 41 4e 52 54 38 38 37 66 61 71 Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C1%2C1732133922843000%2Cnull%2Cnull%2Cnull%2C%5B%5B1732133922843000%5D%2Cnull%2C1%5D%2Cnull%2C716%2Cnull%2C1%2C1%5D%5D%2C%5B%22CPWCutXd64kDFXzL8gcdEjcQyA%22%2C1732133922842000%2C1732133914575220%2C%22ADFN-cuANRT887faq
2024-11-20 20:18:46 UTC	616	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:18:46 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-pXqYlGboG2jb_EgiXz1tEA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49772	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:45 UTC	1417	OUT	POST /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/font/getmetadata HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:45 UTC	246	OUT	Data Raw: 66 61 6d 69 6c 69 65 73 3d 41 6d 61 74 69 63 25 32 30 53 43 25 32 43 43 61 76 65 61 74 25 32 43 43 6f 6d 66 6f 72 74 61 61 25 32 43 45 42 25 32 30 47 61 72 61 6d 6f 6e 64 25 32 43 4c 65 78 65 6e 64 25 32 43 4c 6f 62 73 74 65 72 25 32 43 4c 6f 72 61 25 32 43 4d 65 72 72 69 77 65 61 74 68 65 72 25 32 43 4d 6f 6e 74 73 65 72 72 61 74 25 32 43 4e 75 6e 69 74 6f 25 32 43 4f 73 77 61 6c 64 25 32 43 50 61 63 69 66 69 63 6f 25 32 43 50 6c 61 79 66 61 69 72 25 32 30 44 69 73 70 6c 61 79 25 32 43 52 6f 62 6f 74 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 4d 6f 6e 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 53 65 72 69 66 25 32 43 53 70 65 63 74 72 61 6c 26 75 73 65 41 6c 6c 53 75 62 73 65 74 73 3d 74 72 75 65 26 66 6f 72 6d 61 74 3d 77 6f 66 66 32 Data Ascii: families=Amatic%20SC%2CCaveat%2CComfortaa%2CEB%20Garamond%2CLexend%2CLobster%2CLora%2CMerriweather%2CMontserrat%2CNunito%2COswald%2CPacifico%2CPlayfair%20Display%2CRoboto%2CRoboto%20Mono%2CRoboto%20Serif%2CSpectral&useAllSubsets=true&format=woff2
2024-11-20 20:18:46 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:18:46 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:18:46 UTC	718	IN	Data Raw: 37 30 30 36 0d 0a 29 5d 7d 27 0a 7b 22 66 6f 6e 74 4d 65 74 61 64 61 74 61 4d 61 70 22 3a 7b 22 43 61 76 65 61 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 66 6f 6e 74 46 61 63 65 73 22 3a 5b 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c Data Ascii: 7006)]}'{"fontMetadataMap":{"Caveat":{"documentFont":false,"fontFaces":[{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f Data Ascii: odepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.co
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 4e 76 4f 78 2d 70 6a 66 4a 39 65 49 57 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 4c 41 54 49 4e 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 34 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 52 65 67 75 6c 61 72 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 Data Ascii: NvOx-pjfJ9eIWpYQ.woff2"}],"style":"normal","subset":"LATIN","subsetValue":"latin","weight":400,"weightedFontFamily":"Caveat Regular"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 63 42 39 65 49 47 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 Data Ascii: "ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjcB9eIGpYQ.woff2"}],"sty
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 35 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 4d 65 64 69 75 6d 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 Data Ascii: lue":"latin","weight":500,"weightedFontFamily":"Caveat Medium"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"ulCodePage
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 53 78 36 65 49 47 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 43 59 52 49 4c 4c 49 43 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 63 79 72 69 6c 6c 69 63 22 2c 22 77 65 69 67 68 74 22 3a 36 30 Data Ascii: ent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjSx6eIGpYQ.woff2"}],"style":"normal","subset":"CYRILLIC","subsetValue":"cyrillic","weight":60
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a Data Ascii: ,{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 52 56 36 65 49 47 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 43 59 52 49 4c 4c 49 43 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 63 79 72 69 6c 6c 69 63 22 2c 22 77 65 69 67 68 74 22 3a 37 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 42 6f 6c 64 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 Data Ascii: mat":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6eIGpYQ.woff2"}],"style":"normal","subset":"CYRILLIC","subsetValue":"cyrillic","weight":700,"weightedFontFamily":"Caveat Bold"},{"fontDrawSize":{"STypoAsce
2024-11-20 20:18:46 UTC	1390	IN	Data Raw: 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 36 30 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c Data Ascii: "ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":160,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49773	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:45 UTC	541	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:18:46 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:18:46 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49780	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:48 UTC	1002	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4566 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:48 UTC	4566	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 35 2c 5b 5b 22 31 37 33 32 31 33 33 39 32 32 38 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 33 32 31 33 33 39 32 32 38 34 33 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 32 31 33 33 39 32 32 38 34 33 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],2035,[["1732133922845",null,null,null,null,null,null,"[[[null,null,1,1732133922843000,null,null,null,[[1732133922843000],null,1],null,716,null,1,1
2024-11-20 20:18:49 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=WGZUyuaOS8K5nMqmTTGcspTW4-OAx8e7pSEFMQ-7ZSgxKbB4Af5mVEDhH5AkDq1dktnYzwUB3y8s63mU9rPmP6n9IyZHBgnk4-h9cccqkEXEgZqB0-DpLrV_NUI0UhtAFGqbZhSEqjK2dxWhGM_eRjzgpXHQ6UeuAcvY_GIswFytRtNUwSTrUYxTEh6lOLc; expires=Thu, 22-May-2025 20:18:48 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:18:48 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 20 Nov 2024 20:18:48 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-20 20:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49783	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:48 UTC	1419	OUT	POST /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/naLogImpressions HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 11103 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:48 UTC	11103	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 34 31 25 32 43 6e 75 6c 6c 25 32 43 32 25 32 43 31 37 33 32 31 33 33 39 32 32 39 30 38 30 30 30 25 32 43 25 35 42 25 35 42 25 35 42 31 32 38 30 25 32 43 39 30 37 25 32 43 31 32 38 30 25 32 43 39 38 34 25 35 44 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 66 61 6c 73 65 25 32 43 74 72 75 65 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c Data Ascii: impressionBatch=%5B%5B%5B41%2Cnull%2C2%2C1732133922908000%2C%5B%5B%5B1280%2C907%2C1280%2C984%5D%2Cfalse%2Cnull%2Cnull%2C1%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cfalse%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5Bfalse%2Ctrue%5D%2Cnull%2Cnull
2024-11-20 20:18:49 UTC	616	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:18:49 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-Y2Gdx6PMTctzcoFRk1AtXg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49782	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:48 UTC	1002	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 8295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:48 UTC	8295	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 35 2c 5b 5b 22 31 37 33 32 31 33 33 39 32 35 38 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2035,[["1732133925845",null,null,null
2024-11-20 20:18:49 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY; expires=Thu, 22-May-2025 20:18:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:18:49 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 20 Nov 2024 20:18:49 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-20 20:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49784	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:49 UTC	965	OUT	GET /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/font/getmetadata HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=25qjwY6NxNVHjOKSZsBAWf3eefL92Jvi5K9rTigmaePgv1ekQpBlDwA9C9D4WMrDpeqZ-qFbOzlDwSNLxwMSPRNIWfqxunRfToRcLGh5UAkWI1Gw9Bd1FM1tmD-9_2A4TSgDdUr43PufXA1U9KArqB5LPYDWVlNuov3tAFPA0675ZQ-NsUfXJWk
2024-11-20 20:18:50 UTC	903	IN	HTTP/1.1 400 Bad Request Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:18:50 GMT Content-Type: text/html; charset=utf-8 x-chromium-appcache-fallback-override: disallow-fallback Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-pAGR5pLFvzYGdP19_4_cfg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:18:50 UTC	487	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-11-20 20:18:50 UTC	1390	IN	Data Raw: 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 73 6d 67 46 4b 43 58 4f 49 41 33 5a 46 61 76 79 69 52 44 63 31 77 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 73 6d 67 46 4b 43 58 4f 49 41 33 5a 46 61 76 79 69 52 44 63 31 77 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 Data Ascii: type="text/css" nonce="smgFKCXOIA3ZFavyiRDc1w"><style nonce="smgFKCXOIA3ZFavyiRDc1w">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:i
2024-11-20 20:18:50 UTC	1165	IN	Data Raw: 68 74 3a 20 31 35 30 25 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 38 30 70 78 3b 22 3e 3c 64 69 76 20 69 64 3d 22 64 72 69 76 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 69 6d 67 22 20 74 69 74 6c 65 3d 22 47 6f 6f 67 6c 65 20 6c 6f 67 6f 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 74 65 78 74 22 3e 26 6e Data Ascii: ht: 150%;}</style></head><body><div id="outerContainer"><div id="innerContainer"><div style="position: absolute; top: -80px;"><div id="drive-logo"><a href="/"><span class="docs-drivelogo-img" title="Google logo"></span><span class="docs-drivelogo-text">&n
2024-11-20 20:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49788	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:51 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=WGZUyuaOS8K5nMqmTTGcspTW4-OAx8e7pSEFMQ-7ZSgxKbB4Af5mVEDhH5AkDq1dktnYzwUB3y8s63mU9rPmP6n9IyZHBgnk4-h9cccqkEXEgZqB0-DpLrV_NUI0UhtAFGqbZhSEqjK2dxWhGM_eRjzgpXHQ6UeuAcvY_GIswFytRtNUwSTrUYxTEh6lOLc
2024-11-20 20:18:51 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:18:51 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:18:51 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:18:51 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49796	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:18:53 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:18:54 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:18:54 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:18:54 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:18:54 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49829	172.217.17.49	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:06 UTC	410	OUT	OPTIONS /csp/report-to/gse_qebhlk HTTP/1.1 Host: csp.withgoogle.com Connection: keep-alive Origin: https://accounts.google.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:07 UTC	547	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: content-type Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:19:07 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49837	172.217.17.49	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:09 UTC	348	OUT	POST /csp/report-to/gse_qebhlk HTTP/1.1 Host: csp.withgoogle.com Connection: keep-alive Content-Length: 718 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:09 UTC	718	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 64 69 73 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 70 6f 72 74 69 6e 67 22 2c 22 65 66 66 65 63 74 69 76 65 50 6f 6c 69 63 79 22 3a 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2c 22 70 72 65 76 69 6f 75 73 52 65 73 70 6f 6e 73 65 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 4c 6f 67 69 6e 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 32 46 66 6f 72 6d 73 25 32 46 64 25 32 46 65 25 32 46 31 46 41 49 70 51 4c 53 64 6c 76 33 39 58 42 54 6a 54 70 56 34 37 41 41 69 45 59 75 7a 41 65 49 58 79 55 69 49 7a 68 6b 4c 39 46 6c 6b 69 62 75 42 68 6e 75 73 6b 31 67 25 32 46 76 69 65 77 66 6f Data Ascii: [{"age":1,"body":{"disposition":"reporting","effectivePolicy":"same-origin","previousResponseURL":"https://accounts.google.com/Login?continue=https%3A%2F%2Fdocs.google.com%2Fforms%2Fd%2Fe%2F1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g%2Fviewfo
2024-11-20 20:19:10 UTC	1699	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:19:10 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-6Of8dedx9g6g89VJ43nqXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/csp/_/CspCollectorHttp/web-reports?context=eJzjEtDikmLw0pBicEqfwRoCxELcHPs6fu5kEzhx4o6Wkl5SfmF8cWpyaVFmSaVucnGBbnJ-Tk5qckl-kW5GSUlBvJGBkYmhoaGlnoFZfIEBANdaGZ8" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49884	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:20 UTC	1237	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-2071716587&timestamp=1732133957437 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:21 UTC	1978	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-R_z8tRJl5NVmy4TTyDuEKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:19:21 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjctDikmII1JBikPj6kkkNiJ3SZ7AGALHR2vOsDkCc9O88awEQX-6-xHodiFV7LrEaA3GRxBXWBiAW4uE42fFzJ5vAjYubnzEq6SXlF8ZnpqTmlWSWVKbk5yZm5iXn52dnphYXpxaVpRbFGxkYmRgaGhroGVjEFxgAAI1WMWY" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 37 36 32 33 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 52 5f 7a 38 74 52 4a 6c 35 4e 56 6d 79 34 54 54 79 44 75 45 4b 77 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 7623<html><head><script nonce="R_z8tRJl5NVmy4TTyDuEKw">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f Data Ascii: \d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 3d 64 21 3d 6e 75 6c 6c 3f 64 3a 30 3b 61 3d 3d 6e 75 6c 6c 26 26 28 61 3d 79 61 29 3b 79 61 3d 76 6f 69 64 20 30 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 65 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 65 7c 3d 35 31 32 29 3a 61 3d 0a 5b 5d 3b 62 26 26 28 65 3d 65 26 2d 33 33 35 32 31 36 36 35 7c 28 62 26 31 30 32 33 29 3c 3c 31 35 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 71 22 29 3b 65 3d 41 28 61 29 3b 69 66 28 65 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 74 22 29 3b 69 66 28 65 26 36 34 29 72 65 74 75 72 6e 20 61 3b 64 3d 3d 3d 31 7c 7c 64 3d 3d 3d 32 7c 7c 28 65 7c 3d 36 34 29 3b 69 66 28 63 26 26 28 65 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 Data Ascii: =d!=null?d:0;a==null&&(a=ya);ya=void 0;if(a==null){var e=96;c?(a=[c],e\|=512):a=[];b&&(e=e&-33521665\|(b&1023)<<15)}else{if(!Array.isArray(a))throw Error("q");e=A(a);if(e&2048)throw Error("t");if(e&64)return a;d===1\|\|d===2\|\|(e\|=64);if(c&&(e\|=512,c!==a[0]))
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 44 3f 61 2e 4b 3a 4b 61 28 61 2e 4b 2c 4e 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 76 61 72 20 62 3d 21 44 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 61 5b 63 2d 31 5d 2c 65 3d 77 61 28 64 29 3b 65 3f 63 2d 2d 3a 64 3d 76 6f 69 64 20 30 3b 76 61 72 20 66 3d 0a 61 3b 69 66 28 65 29 7b 62 3a 7b 76 61 72 20 68 3d 64 3b 76 61 72 20 67 3b 76 61 72 20 6b 3d 21 31 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 69 73 4e 61 4e 28 2b 6c 29 29 65 3d 76 6f 69 64 20 30 2c 28 28 65 3d 67 29 21 3d 6e 75 6c 6c 3f 65 3a 67 3d 7b 7d 29 5b 6c 5d 3d 68 5b 6c 5d 3b 65 6c 73 65 20 69 66 28 65 3d 68 5b 6c 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 Data Ascii: ,Oa=function(a){a=D?a.K:Ka(a.K,Na,void 0,void 0,!1);var b=!D,c=a.length;if(c){var d=a[c-1],e=wa(d);e?c--:d=void 0;var f=a;if(e){b:{var h=d;var g;var k=!1;if(h)for(var l in h)if(isNaN(+l))e=void 0,((e=g)!=null?e:g={})[l]=h[l];else if(e=h[l],Array.isArray(
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 53 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 45 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 61 28 51 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: oat64Array".split(" "),c=0;c<b.length;c++){var d=Sa[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&E(d.prototype,a,{configurable:!0,writable:!0,value:function(){return Ta(Qa(this))}})}return a});var Ta=function(a){a={next:a};a[Symbol.ite
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6c 22 29 3b 64 28 6b 29 3b 69 66 28 21 48 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6d 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 5d 2c 74 68 69 73 2e 67 Data Ascii: )}};g.prototype.set=function(k,l){if(!c(k))throw Error("l");d(k);if(!H(k,f))throw Error("m`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&H(k,f)?k[f][this.g]:void 0};g.prototype.has=function(k){return c(k)&&H(k,f)&&H(k[f],this.g
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 48 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 76 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 76 2e 6b 65 79 21 3d 3d 76 2e 6b 65 79 7c 7c 6b 3d 3d 3d 76 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6c 3a 76 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c Data Ascii: function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&H(g[0],l))for(g=0;g<m.length;g++){var v=m[g];if(k!==k&&v.key!==v.key\|\|k===v.key)return{id:l,list:m,index:g,l:v}}return{id:l,
2024-11-20 20:19:21 UTC	1978	IN	Data Raw: 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 65 29 7d 7d 72 65 74 75 72 6e 20 Data Ascii: ly(a.bind,arguments)},hb=function(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return
2024-11-20 20:19:22 UTC	1978	IN	Data Raw: 63 3d 21 31 3b 74 72 79 7b 76 61 72 20 64 3d 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 61 2e 6c 69 6e 65 7c 7c 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 7d 63 61 74 63 68 28 66 29 7b 64 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 74 72 79 7b 76 61 72 20 65 3d 61 2e 66 69 6c 65 4e 61 6d 65 7c 7c 0a 61 2e 66 69 6c 65 6e 61 6d 65 7c 7c 61 2e 73 6f 75 72 63 65 55 52 4c 7c 7c 71 2e 24 67 6f 6f 67 44 65 62 75 67 46 6e 61 6d 65 7c 7c 62 7d 63 61 74 63 68 28 66 29 7b 65 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 62 3d 6e 62 28 61 29 3b 72 65 74 75 72 6e 21 63 26 26 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 61 2e 66 69 6c 65 4e 61 6d 65 26 26 61 2e 73 74 61 63 6b 26 26 61 2e 6d 65 73 73 61 67 65 26 26 61 2e 6e 61 6d Data Ascii: c=!1;try{var d=a.lineNumber\|\|a.line\|\|"Not available"}catch(f){d="Not available",c=!0}try{var e=a.fileName\|\|a.filename\|\|a.sourceURL\|\|q.$googDebugFname\|\|b}catch(f){e="Not available",c=!0}b=nb(a);return!c&&a.lineNumber&&a.fileName&&a.stack&&a.message&&a.nam
2024-11-20 20:19:22 UTC	1978	IN	Data Raw: 29 7d 62 2e 70 75 73 68 28 61 29 3b 63 2e 70 75 73 68 28 22 29 5c 6e 22 29 3b 74 72 79 7b 63 2e 70 75 73 68 28 73 62 28 61 2e 63 61 6c 6c 65 72 2c 62 29 29 7d 63 61 74 63 68 28 68 29 7b 63 2e 70 75 73 68 28 22 5b 65 78 63 65 70 74 69 6f 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 63 61 6c 6c 65 72 5d 5c 6e 22 29 7d 7d 65 6c 73 65 20 61 3f 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 6c 6f 6e 67 20 73 74 61 63 6b 2e 2e 2e 5d 22 29 3a 63 2e 70 75 73 68 28 22 5b 65 6e 64 5d 22 29 3b 0a 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 22 22 29 7d 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4b 5b 61 5d 29 72 65 74 75 72 6e 20 4b 5b 61 5d 3b 61 3d 53 74 72 69 6e 67 28 61 29 3b 69 66 28 21 4b 5b 61 5d 29 7b 76 61 72 20 62 3d 2f 66 75 6e 63 74 69 6f 6e 5c 73 2b Data Ascii: )}b.push(a);c.push(")\n");try{c.push(sb(a.caller,b))}catch(h){c.push("[exception trying to get caller]\n")}}else a?c.push("[...long stack...]"):c.push("[end]");return c.join("")},ob=function(a){if(K[a])return K[a];a=String(a);if(!K[a]){var b=/function\s+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49890	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:23 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:24 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:23 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49894	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:23 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:24 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:24 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49896	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:23 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:19:24 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:24 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:25 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 16:37:24 GMT ETag: "0x8DD08B87243495C" x-ms-request-id: b5254561-a01e-0070-0158-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201925Z-185f5d8b95csd4bwhC1NYCq7dc0000000arg000000003tfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:25 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 20:19:25 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49900	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XeloF7a++syWelg&MD=VY+gfvar HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 20:19:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d90a87fb-b4fe-43b9-be2a-ed109d7ef180 MS-RequestId: 1b2a71ce-ab10-46b1-a66b-6f8ba0462873 MS-CV: lVTcsEPcPU2WULIB.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 20:19:25 GMT Connection: close Content-Length: 30005
2024-11-20 20:19:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 20:19:25 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49902	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:26 UTC	1333	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:26 UTC	565	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 34 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 36 30 34 32 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"34",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732133960427",null,null,n
2024-11-20 20:19:26 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49904	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:26 UTC	1333	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:26 UTC	498	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 34 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 36 30 39 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"34",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732133960936",null,null,n
2024-11-20 20:19:27 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49905	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:26 UTC	1333	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:26 UTC	504	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 34 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 36 31 30 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"34",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732133961019",null,null,n
2024-11-20 20:19:27 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:27 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49907	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	1311	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1533 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:27 UTC	1533	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 35 34 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1732133954000",null,null,nu
2024-11-20 20:19:28 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:28 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201928Z-185f5d8b95cwtv72hC1NYC141w0000000ap000000000g2te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:28 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:28 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201928Z-185f5d8b95cjbkr4hC1NYCeu240000000ag0000000010pm6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201928Z-r1d97b99577l6wbzhC1TEB3fwn00000009k0000000001we8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:28 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05856cf7-f01e-0020-4060-3b956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201928Z-178bfbc474btvfdfhC1NYCa2en00000000hg000000008aab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201928Z-1777c6cb754n67brhC1TEBcp9c0000000a6g0000000064q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49915	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:28 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:29 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:29 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201930Z-178bfbc474bwh9gmhC1NYCy3rs00000000cg000000008t81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:30 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201930Z-r1d97b99577tssmjhC1TEB8kan000000095000000000ngff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:30 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49919	13.107.246.63	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201930Z-185f5d8b95c9mqtvhC1NYCghtc0000000at000000000n7ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:30 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201930Z-1777c6cb754ww792hC1TEBzqu400000009v000000000s585 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:30 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201930Z-r1d97b99577xdmfxhC1TEBqbhg00000000wg00000000qxvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49923	172.217.21.36	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:30 UTC	1226	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:31 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 19 Nov 2024 11:22:24 GMT Expires: Wed, 27 Nov 2024 11:22:24 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 118627 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:31 UTC	683	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-11-20 20:19:31 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i
2024-11-20 20:19:31 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7AB
2024-11-20 20:19:31 UTC	1390	IN	Data Raw: 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-11-20 20:19:31 UTC	577	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49924	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:31 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:32 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:32 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49926	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201932Z-178bfbc474blv55whC1NYCpz4800000000m000000000qc6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201932Z-1777c6cb7549j9hhhC1TEBzmcc0000000a0g00000000cmfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49928	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201932Z-r1d97b99577jlrkbhC1TEBq8d0000000093g00000000u23v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49927	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201932Z-1777c6cb754rz2pghC1TEBghen00000009wg00000000sbmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201932Z-185f5d8b95csd4bwhC1NYCq7dc0000000akg000000011186 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49931	172.217.21.36	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:33 UTC	655	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:34 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 19 Nov 2024 11:22:24 GMT Expires: Wed, 27 Nov 2024 11:22:24 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 118629 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:34 UTC	683	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-11-20 20:19:34 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i
2024-11-20 20:19:34 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7AB
2024-11-20 20:19:34 UTC	1390	IN	Data Raw: 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-11-20 20:19:34 UTC	577	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49933	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:33 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:34 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:34 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49932	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:33 UTC	1333	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:33 UTC	817	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 34 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 37 30 38 38 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"34",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732133970882",null,null,n
2024-11-20 20:19:34 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:34 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:34 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:34 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4a7db69e-a01e-0084-45ec-3a9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201934Z-185f5d8b95csd4bwhC1NYCq7dc0000000ang00000000ra6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201935Z-1777c6cb754xrr98hC1TEB3kag00000009xg00000000ef5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9f6f8d40-a01e-000d-0664-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201935Z-185f5d8b95c9mqtvhC1NYCghtc0000000aug00000000dxxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:35 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201935Z-r1d97b99577hsvhhhC1TEByb1w00000003n000000000bwfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49940	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:34 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201935Z-185f5d8b95cwtv72hC1NYC141w0000000ang00000000m7zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49942	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:36 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:37 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:37 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49943	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:36 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 367ebca4-601e-0070-6762-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201937Z-185f5d8b95cgrrn8hC1NYCgwh40000000ak000000000snbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49944	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:36 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201937Z-185f5d8b95cgrrn8hC1NYCgwh40000000ahg00000000usez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49945	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:37 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201937Z-1777c6cb754ww792hC1TEBzqu40000000a10000000000dya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49946	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:37 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201937Z-1777c6cb7544nvmshC1TEBf7qc00000009vg00000000hzd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49947	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:37 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:37 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201937Z-185f5d8b95c4vwv8hC1NYCy4v40000000ayg000000001ye0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:37 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49949	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:39 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:39 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49948	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201939Z-185f5d8b95csd4bwhC1NYCq7dc0000000aq000000000eeuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:39 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49951	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f65efca2-801e-0035-4104-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201939Z-r1d97b99577hsvhhhC1TEByb1w00000003p0000000008tbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49950	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201939Z-178bfbc474bscnbchC1NYCe7eg00000000p000000000bty1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49953	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201939Z-1777c6cb754vxwc9hC1TEBykgw0000000a4000000000761e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49952	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:39 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201939Z-1777c6cb754lv4cqhC1TEB13us00000009z000000000v52d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49954	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201941Z-185f5d8b95c4vwv8hC1NYCy4v40000000ayg000000001yqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49956	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201941Z-1777c6cb7549x5qchC1TEBggbg0000000a3g00000000hk8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49955	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 76e93f39-101e-0034-5559-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201941Z-185f5d8b95cgrrn8hC1NYCgwh40000000ahg00000000usth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49959	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	1333	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:41 UTC	775	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 34 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 37 38 36 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"34",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732133978690",null,null,n
2024-11-20 20:19:42 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:42 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49957	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201941Z-178bfbc474bwh9gmhC1NYCy3rs00000000hg000000007r1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49958	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:41 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:41 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 57b2d8b6-201e-0033-2767-3bb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201941Z-178bfbc474bbbqrhhC1NYCvw7400000000q00000000062b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49961	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:43 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201943Z-1777c6cb754j47wfhC1TEB5wrw00000005z0000000007gck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:43 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49965	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	1310	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 967 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:43 UTC	967	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 33 32 31 33 33 39 37 30 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1732133970000",null,null,nu
2024-11-20 20:19:44 UTC	499	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:44 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:44 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49963	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201944Z-185f5d8b95cwtv72hC1NYC141w0000000ap000000000g4bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49966	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:44 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201944Z-r1d97b99577n5jhbhC1TEB74vn00000009d0000000002xpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:44 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49962	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201944Z-1777c6cb754ww792hC1TEBzqu400000009v000000000s5v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49967	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:43 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201944Z-178bfbc474blv55whC1NYCpz4800000000hg00000000q3cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49968	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:44 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:45 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:45 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:45 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49969	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:45 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:45 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201945Z-1777c6cb754lv4cqhC1TEB13us0000000a40000000007n1c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:46 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49970	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:45 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:46 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 76e95f1f-101e-0034-7059-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201946Z-178bfbc474bmqmgjhC1NYCy16c00000000g00000000085v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:46 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49971	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:46 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:46 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201946Z-178bfbc474blv55whC1NYCpz4800000000hg00000000q3pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:46 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49972	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:46 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:46 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201946Z-185f5d8b95c9mqtvhC1NYCghtc0000000avg000000006355 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:46 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49973	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:46 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:46 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201946Z-r1d97b99577d6qrbhC1TEBux5s00000009f000000000cnqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:46 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49974	172.217.19.206	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:46 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 20 Nov 2024 20:19:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 20:19:47 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-20 20:19:47 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49976	172.217.19.238	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:46 UTC	1010	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5057 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:46 UTC	5057	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 35 2c 5b 5b 22 31 37 33 32 31 33 33 39 38 33 38 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2035,[["1732133983821",null,null,null
2024-11-20 20:19:47 UTC	495	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 20:19:47 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-20 20:19:47 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-20 20:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49975	142.250.181.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:47 UTC	1426	OUT	POST /forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/naLogImpressions HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 6147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSdlv39XBTjTpV47AAiEYuzAeIXyUiIzhkL9FlkibuBhnusk1g/viewform Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=5umZfOhgQryYAUGATCmnBrtD7bPnNYzBezxmNQB4YxU; COMPASS=spreadsheet_forms=CjIACWuJV50aWs6RAyM2-KDooqyFxMb-UTJb1bPmxjBTAi66-MLyWGwykaz_h3BzQjs57xCqpPm5Bho0AAlriVeZWnH1sYDulOyp3CiKaZ-xUrXP2G7XB4cYqESsYA3g_CIFQVv1WNpKcQKz07psIQ==; NID=519=YmnOyaLV8cjZQBQqfWTNQXKv5XhzObhiZIrNmzaXKEKjo8bCBPcPkl4l_AhqqWhjV0EVuz2_Cq-PUQDZQ-crZ8S66TI9OOK28VYZnOB6Pktv1-cvJgsYli7FixqXISfNdZj9H5Wkr87sU1leyw9VfzjnXCl8XueGzhoGYMIIol0j1tv1XUSiqDGJvRr4DCY
2024-11-20 20:19:47 UTC	6147	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 31 25 32 43 31 37 33 32 31 33 33 39 34 31 31 33 30 30 30 30 25 32 43 25 35 42 25 35 42 25 35 42 31 32 38 30 25 32 43 39 30 37 25 32 43 31 32 38 30 25 32 43 39 38 34 25 35 44 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 66 61 6c 73 65 25 32 43 74 72 75 65 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C11%2C1732133941130000%2C%5B%5B%5B1280%2C907%2C1280%2C984%5D%2Cfalse%2Cnull%2Cnull%2C1%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cfalse%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5Bfalse%2Ctrue%5D%5D%2Cnull%
2024-11-20 20:19:47 UTC	616	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Nov 2024 20:19:47 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-53VSNYP6yDDgt8ckHiu1SQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49977	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:47 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201948Z-185f5d8b95crwqd8hC1NYCps680000000am0000000018u7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49978	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:48 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:48 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c366b67a-401e-0083-1804-3b075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201948Z-r1d97b995774n5h6hC1TEBvf8400000009cg000000004n50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49980	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:48 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201948Z-r1d97b99577dd2gchC1TEBz5ys0000000980000000004exd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49981	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:48 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:48 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201948Z-185f5d8b95c5lcmhhC1NYCsnsw0000000au000000000fx4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:19:48 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49979	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:48 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201948Z-r1d97b995777mdbwhC1TEBezag00000009b0000000009f2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:48 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49983	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201950Z-178bfbc474btvfdfhC1NYCa2en00000000mg000000005zax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49985	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201950Z-178bfbc474bq2pr7hC1NYCkfgg00000000r0000000000114 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49984	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201950Z-1777c6cb7549j9hhhC1TEBzmcc00000009x000000000tkbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49987	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:19:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:19:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 3585b350-301e-005d-097c-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T201950Z-178bfbc474bq2pr7hC1NYCkfgg00000000gg00000000phm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:19:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49986	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:19:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	15:18:22
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:18:26
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:18:28
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/PP1myaVZHGwAABJ89"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	15:19:20
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5960 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	15:19:20
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5940 --field-trial-handle=2204,i,17525941804215759974,17467039841426206756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://forms.gle/PP1myaVZHGwAABJ89

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Windows Analysis Report
https://forms.gle/PP1myaVZHGwAABJ89