Edit tour

Windows Analysis Report
http://dsawuiohfd@gmail.com

Overview

General Information

Sample URL:	http://dsawuiohfd@gmail.com
Analysis ID:	1530705
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6408 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dsawuiohfd@gmail.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Gmail does not match URL

Source: http://dsawuiohfd@gmail.com

Sample URL: PII: dsawuiohfd@gmail.com

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-990860293&timestamp=1728557374993
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-990860293&timestamp=1728557374993
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-990860293&timestamp=1728557374993
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95464	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95464	HTTP Parser: No favicon
Source: https://support.google.com/chromebook/answer/1057090	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/188842?hl=en&ref_topic=7439637	HTTP Parser: No favicon
Source: https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU#topic=7439538	HTTP Parser: No favicon
Source: https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU#topic=7439538	HTTP Parser: No favicon
Source: https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU#topic=7439538	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1373695208%3A1728557369953704&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49775 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:65194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:65235 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:65165 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49775 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mail/u/0/ HTTP/1.1Host: mail.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-990860293&timestamp=1728557374993 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en-US HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=YeH1admxzhv0v8-QG9zetUIB1XOIzY32sE9ms_agB57MahUOPG6k53sScPBhN7CEMlTowp-K6PC5CM9AXiP_eOGeXXoj5N0P4T-2GozxTTBPo26m3dSYL-r5K_j0L2KHFbV-11C7KCEfS359DRjtjpUtXBYeN4h6h1yPSXS7l6Ks4AXQnsZIsY8GVMY
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=YeH1admxzhv0v8-QG9zetUIB1XOIzY32sE9ms_agB57MahUOPG6k53sScPBhN7CEMlTowp-K6PC5CM9AXiP_eOGeXXoj5N0P4T-2GozxTTBPo26m3dSYL-r5K_j0L2KHFbV-11C7KCEfS359DRjtjpUtXBYeN4h6h1yPSXS7l6Ks4AXQnsZIsY8GVMY
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.1.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/chrome/answer/6130773?hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en-US&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638641541866620088-116834210&p=account_iph&rd=1 HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557398.0.0.0; _ga=GA1.1.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557398.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /chrome/answer/95464 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557398.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557414.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557414.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /chromebook/answer/1057090 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557414.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chromebook HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557419.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chromebook&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801510,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557419.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chromebook HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557419.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /chrome/answer/95314?hl=en&ref_topic=7439637 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557419.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557429.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /chrome/answer/188842?hl=en&ref_topic=7439637 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557429.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557429.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /I_WmI3LNwth97khKinjXICi2CSSW7UA6bssc1HaDBPTg9o8SYexzNgGgfelYzKtd-nA=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zv0iMGyZkxcm-PjpHG8tvHBQtW0g2SV59s0pWblj5vYThdjslgYYr7x9CP6fxCzv27M=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557437.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /I_WmI3LNwth97khKinjXICi2CSSW7UA6bssc1HaDBPTg9o8SYexzNgGgfelYzKtd-nA=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zv0iMGyZkxcm-PjpHG8tvHBQtW0g2SV59s0pWblj5vYThdjslgYYr7x9CP6fxCzv27M=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557437.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /chrome/?hl=en&sjid=5498862093573706523-EU HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557437.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10803152%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557449.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10803152%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _gid=GA1.3.1944910726.1728557390; _ga_H30R9PNQFN=GS1.1.1728557388.1.1.1728557449.0.0.0; _ga=GA1.3.1182680858.1728557389
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gmail.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_296.2.dr	String found in binary or memory: </script> <div class="side-container"><div id="helpguide"></div> <div data-page-data-key="fixed-sidebar-required" style="display:none">true</div> <div class="fixed-sidebar-container"> <div class="primary-nav"> <nav> <div class="sibling-nav" data-stats-ve="3" data-stats-imp=""><h2><a class="title-link" href="/chromebook/topic/3406211?hl=en&ref_topic=3399709">Sign in</a></h2><ul class="sibling-list"><li><div class="sibling-link-descriptor" id="/chromebook/answer/1059242?hl=en&ref_topic=3406211">1 of 6</div><a aria-describedby="/chromebook/answer/1059242?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/1059242?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Add a person to your Chromebook</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/1057090?hl=en&ref_topic=3406211">2 of 6</div><a aria-describedby="/chromebook/answer/1057090?hl=en&ref_topic=3406211" class="sibling-link sibling-link--current" href="#"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Use a Chromebook as a guest</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/2587994?hl=en&ref_topic=3406211">3 of 6</div><a aria-describedby="/chromebook/answer/2587994?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/2587994?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Lock or unlock your screen</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/3420029?hl=en&ref_topic=3406211">4 of 6</div><a aria-describedby="/chromebook/answer/3420029?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/3420029?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Sign out or turn off your Chromebook</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/6375270?hl=en&ref_topic=3406211">5 of 6</div><a aria-describedby="/chromebook/answer/6375270?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/6375270?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: ;function hr(){this.part="snippet,id,contentDetails,localizations,statistics";this.Ek=new Tq({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: ;var Gga=wa(["//www.youtube.com/player_api"]),Hga=Mn(Gga),ir=[],Iga=!1;function jr(){if(!Iga){window.onYouTubeIframeAPIReady=Jga;var a=$o("SCRIPT");un(a,Hga);document.head.appendChild(a);Iga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: ;var Qra=wa(["//www.youtube.com/player_api"]),kA=4/3,Rra=16/9,lA={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function mA(a){var b=a.Eb;var c=a.Ml===void 0?!1:a.Ml;a=a.playerVars===void 0?lA:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Eb=b;this.Ml=c;this.id=this.Eb.getId();this.playerVars=a;b=this.Eb.mediumThumbnail.width;c=this.Eb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===kA?kA:Rra:kA;this.watch(this.Eb)} equals www.youtube.com (Youtube)
Source: chromecache_261.2.dr	String found in binary or memory: Mf=w(["https://sandbox.google.com/tools/feedback/"]),Nf=w(["https://www.google.cn/tools/feedback/"]),Of=w(["https://help.youtube.com/tools/feedback/"]),Pf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Rf=w(["https://localhost.corp.google.com/inapp/"]),Sf=w(["https://localhost.proxy.googlers.com/inapp/"]),Tf=V(vf),Uf=[V(wf),V(xf)],Vf=[V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf)],Wf=[V(If),V(Jf)],Xf= equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: Ua=Ua.split("-")[0].toLowerCase();if(Ra===Ua\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Fa(0);Co("youtube_video_model/load/success");return Qa(c,0)}Sa(c);a.state=3;a.Fa(0);Co("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_198.2.dr	String found in binary or memory: _.oq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.oq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.oq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.oq(_.xq(c))+"&hl="+_.oq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.oq(m)+"/chromebook/termsofservice.html?languageCode="+_.oq(d)+"&regionCode="+_.oq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: function qA(a){if(jo())z().rs==2?window.YT&&window.YT.Player?sA(a,a.o):(ir.push(function(f){sA(this,f)}.bind(a,a.o)),jr()):qo("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_217.2.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: gmail.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.ggpht.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 510sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_261.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_198.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_198.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_223.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_223.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_303.2.dr, chromecache_223.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_243.2.dr, chromecache_218.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_261.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_217.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_223.2.dr, chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_223.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_223.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_223.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_198.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_261.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_261.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_313.2.dr, chromecache_296.2.dr	String found in binary or memory: https://guidebooks.google.com
Source: chromecache_261.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_296.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OY
Source: chromecache_287.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug
Source: chromecache_287.2.dr	String found in binary or memory: https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Source: chromecache_261.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://myaccount.google.com/privacypolicy?hl=
Source: chromecache_217.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_217.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_296.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_223.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_223.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_296.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=
Source: chromecache_287.2.dr	String found in binary or memory: https://safety.google/security-privacy/
Source: chromecache_261.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_261.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_261.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_243.2.dr, chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_243.2.dr, chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_218.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_261.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_285.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_296.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_261.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_287.2.dr	String found in binary or memory: https://support.google.com/accounts?p=learningcenter_7
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_282.2.dr	String found in binary or memory: https://support.google.com/chrome/
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/?p=beta_forum_hc
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/?p=betadesktop
Source: chromecache_197.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/188842
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop
Source: chromecache_313.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS
Source: chromecache_282.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95314?hl
Source: chromecache_249.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95464
Source: chromecache_249.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95464?co=GENIE.Platform%3DAndroid
Source: chromecache_249.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95464?co=GENIE.Platform%3DDesktop
Source: chromecache_249.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95464?co=GENIE.Platform%3DiOS
Source: chromecache_282.2.dr	String found in binary or memory: https://support.google.com/chrome/community
Source: chromecache_296.2.dr	String found in binary or memory: https://support.google.com/chromebook/answer/1057090
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_296.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://support.google.com/embed/tagging/install
Source: chromecache_261.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_261.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_198.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://supporttagging-autopush.sandbox.google.com/embed/tagging/install
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_217.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_261.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_243.2.dr, chromecache_218.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_223.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_217.2.dr, chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_207.2.dr, chromecache_217.2.dr, chromecache_313.2.dr, chromecache_249.2.dr, chromecache_198.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_282.2.dr	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chromecache_296.2.dr	String found in binary or memory: https://www.google.com/chromebook/howto/
Source: chromecache_198.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_261.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_217.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_223.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_223.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_217.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_239.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_218.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_296.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_296.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_261.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_296.2.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLVy7dVK2S_UIkT4vZ5MGJmtA3Ir6-wyNN&amp;utm_source=help%20c
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_207.2.dr, chromecache_198.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 65426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 65404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 65528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 65256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 65497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 65336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65190
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65191
Source: unknown	Network traffic detected: HTTP traffic on port 49281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 65448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 65209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 65232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 65475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49348
Source: unknown	Network traffic detected: HTTP traffic on port 65493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49340
Source: unknown	Network traffic detected: HTTP traffic on port 65521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49339
Source: unknown	Network traffic detected: HTTP traffic on port 65205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49331
Source: unknown	Network traffic detected: HTTP traffic on port 65314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49323
Source: unknown	Network traffic detected: HTTP traffic on port 65418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49320
Source: unknown	Network traffic detected: HTTP traffic on port 65508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 65471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 65239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49305
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49380
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49368
Source: unknown	Network traffic detected: HTTP traffic on port 65495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 65334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49360
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49359
Source: unknown	Network traffic detected: HTTP traffic on port 65207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49350
Source: unknown	Network traffic detected: HTTP traffic on port 49314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49349
Source: unknown	Network traffic detected: HTTP traffic on port 65317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65301
Source: unknown	Network traffic detected: HTTP traffic on port 65490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65305
Source: unknown	Network traffic detected: HTTP traffic on port 65295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65304
Source: unknown	Network traffic detected: HTTP traffic on port 65364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49298
Source: unknown	Network traffic detected: HTTP traffic on port 49297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49292
Source: unknown	Network traffic detected: HTTP traffic on port 49354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65319
Source: unknown	Network traffic detected: HTTP traffic on port 65329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65310
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65314
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65315
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49289
Source: unknown	Network traffic detected: HTTP traffic on port 65443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65331
Source: unknown	Network traffic detected: HTTP traffic on port 65193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 65500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49280
Source: unknown	Network traffic detected: HTTP traffic on port 65248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65329
Source: unknown	Network traffic detected: HTTP traffic on port 65305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65322
Source: unknown	Network traffic detected: HTTP traffic on port 65180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65326
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49276
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49270
Source: unknown	Network traffic detected: HTTP traffic on port 65330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65336
Source: unknown	Network traffic detected: HTTP traffic on port 65386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65337
Source: unknown	Network traffic detected: HTTP traffic on port 65273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65509
Source: unknown	Network traffic detected: HTTP traffic on port 65179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65500
Source: unknown	Network traffic detected: HTTP traffic on port 49275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65502
Source: unknown	Network traffic detected: HTTP traffic on port 49157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65511
Source: unknown	Network traffic detected: HTTP traffic on port 65216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65512
Source: unknown	Network traffic detected: HTTP traffic on port 65388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65513
Source: unknown	Network traffic detected: HTTP traffic on port 49305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65529
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65528
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65523
Source: unknown	Network traffic detected: HTTP traffic on port 65238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65524
Source: unknown	Network traffic detected: HTTP traffic on port 65492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65531
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65395
Source: unknown	Network traffic detected: HTTP traffic on port 65487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65388
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65399
Source: unknown	Network traffic detected: HTTP traffic on port 65258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65175
Source: unknown	Network traffic detected: HTTP traffic on port 65319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65181
Source: unknown	Network traffic detected: HTTP traffic on port 49295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65180
Source: unknown	Network traffic detected: HTTP traffic on port 65327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65178
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65179
Source: unknown	Network traffic detected: HTTP traffic on port 65401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65351
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65345
Source: unknown	Network traffic detected: HTTP traffic on port 65477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65349
Source: unknown	Network traffic detected: HTTP traffic on port 65291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65360
Source: unknown	Network traffic detected: HTTP traffic on port 49293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65362
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65357
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65358
Source: unknown	Network traffic detected: HTTP traffic on port 65516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65359
Source: unknown	Network traffic detected: HTTP traffic on port 49364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65373
Source: unknown	Network traffic detected: HTTP traffic on port 65489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65382
Source: unknown	Network traffic detected: HTTP traffic on port 65362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65380
Source: unknown	Network traffic detected: HTTP traffic on port 65175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65386
Source: unknown	Network traffic detected: HTTP traffic on port 65467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65383
Source: unknown	Network traffic detected: HTTP traffic on port 49155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65384
Source: unknown	Network traffic detected: HTTP traffic on port 65411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65379
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65377

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:65194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:65235 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@32/210@38/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dsawuiohfd@gmail.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dsawuiohfd@gmail.com"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://dsawuiohfd@gmail.com	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://help.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/inapp/	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://play.google.com/work/enroll?identifier=	0%	Virustotal		Browse
https://www.youtube.com/embed/	0%	Virustotal		Browse
https://www.google.com/generate_204	0%	Virustotal		Browse
https://policies.google.com/terms?hl=	1%	Virustotal		Browse
https://www.google.com/accounts/TOS	0%	Virustotal		Browse
https://support.google.com/chrome/community	0%	Virustotal		Browse
https://mail.google.com/mail/u/0/	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://www.youtube.com/t/terms?chromeless=1&hl=	0%	Virustotal		Browse
https://support.google.com/accounts?hl=en-US&p=account_iph	0%	Virustotal		Browse
https://moltron-pa.clients6.google.com	0%	Virustotal		Browse
https://www.google.com/chrome/tips/	0%	Virustotal		Browse
https://myaccount.google.com/privacypolicy?hl=	0%	Virustotal		Browse
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0	0%	Virustotal		Browse
https://content-googleapis-test.sandbox.google.com	0%	Virustotal		Browse
https://www.google.com/tools/feedback	0%	Virustotal		Browse
https://lh3.googleusercontent.com/E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36	0%	Virustotal		Browse
https://www.google.com/intl/	1%	Virustotal		Browse
https://youtube.com/t/terms?gl=	0%	Virustotal		Browse
https://support.google.com/chrome/?p=betadesktop	0%	Virustotal		Browse
https://www.google.com/tools/feedback/	0%	Virustotal		Browse
https://safety.google/security-privacy/	1%	Virustotal		Browse
https://play.google.com/log?format=json&hasfast=true	0%	Virustotal		Browse
https://support.google.com/communities/answer/7425194	0%	Virustotal		Browse
https://plus.google.com	0%	Virustotal		Browse
https://support.google.com/communities/answer/7424249	0%	Virustotal		Browse
https://www.google.com/favicon.ico	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www3.l.google.com	142.250.185.206	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
plus.l.google.com	142.250.185.110	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.161	true	false	unknown
mail.google.com	142.250.185.197	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
support.google.com	142.250.185.78	true	false	unknown
gmail.com	142.250.186.101	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.97	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
lh4.ggpht.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/generate_204	false	0%, Virustotal, Browse	unknown
https://support.google.com/apis/prefinsert?v=0&helpcenter=chromebook&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801510,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634	false		unknown
https://mail.google.com/mail/u/0/	false	0%, Virustotal, Browse	unknown
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts	false		unknown
https://support.google.com/chrome/answer/6130773?hl=en	false		unknown
https://support.google.com/accounts?hl=en-US&p=account_iph	false	0%, Virustotal, Browse	unknown
https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64	false		unknown
https://lh3.googleusercontent.com/VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0	false	0%, Virustotal, Browse	unknown
https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU	false		unknown
https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250	false		unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts	false		unknown
https://lh3.googleusercontent.com/E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36	false	0%, Virustotal, Browse	unknown
https://support.google.com/chromebook/answer/1057090	false		unknown
https://support.google.com/chrome/answer/188842?hl=en&ref_topic=7439637	false		unknown
https://www.google.com/favicon.ico	false	0%, Virustotal, Browse	unknown
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown
https://support.google.com/apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634	false		unknown
https://play.google.com/log?format=json&hasfast=true	false	0%, Virustotal, Browse	unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown
https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64	false		unknown
https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&p=account_iph&rd=1	false		unknown
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10803152%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown
https://support.google.com/chrome/answer/95464	false		unknown
https://lh3.googleusercontent.com/ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36	false		unknown
https://lh3.googleusercontent.com/I_WmI3LNwth97khKinjXICi2CSSW7UA6bssc1HaDBPTg9o8SYexzNgGgfelYzKtd-nA=w36-h36	false		unknown
https://support.google.com/chrome/answer/6130773?hl=en-US	false		unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10803152%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_261.2.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_303.2.dr, chromecache_284.2.dr, chromecache_267.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS	chromecache_313.2.dr	false		unknown
https://support.google.com	chromecache_296.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/accounts/TOS	chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://policies.google.com/terms?hl=	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	1%, Virustotal, Browse	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_207.2.dr, chromecache_198.2.dr	false	0%, Virustotal, Browse	unknown
https://policies.google.com/terms/service-specific	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/playlist?list=PLVy7dVK2S_UIkT4vZ5MGJmtA3Ir6-wyNN&amp;utm_source=help%20c	chromecache_296.2.dr	false		unknown
https://g.co/recover	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://moltron-pa.clients6.google.com	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_239.2.dr, chromecache_285.2.dr	false	URL Reputation: safe	unknown
https://help.youtube.com/tools/feedback/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome/community	chromecache_282.2.dr	false	0%, Virustotal, Browse	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_223.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_207.2.dr, chromecache_217.2.dr, chromecache_313.2.dr, chromecache_249.2.dr, chromecache_198.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_207.2.dr, chromecache_198.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid	chromecache_313.2.dr	false		unknown
https://www.google.com/chrome/tips/	chromecache_282.2.dr	false	0%, Virustotal, Browse	unknown
https://policies.google.com/terms/location	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://content-googleapis-test.sandbox.google.com	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_285.2.dr	false	URL Reputation: safe	unknown
https://myaccount.google.com/privacypolicy?hl=	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/tools/feedback	chromecache_261.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://youtube.com/t/terms?gl=	chromecache_207.2.dr, chromecache_198.2.dr	false	0%, Virustotal, Browse	unknown
https://sandbox.google.com/inapp/%	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_198.2.dr	false	1%, Virustotal, Browse	unknown
https://support.google.com/chrome/?p=betadesktop	chromecache_313.2.dr	false	0%, Virustotal, Browse	unknown
https://apis.google.com/js/api.js	chromecache_243.2.dr, chromecache_218.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/	chromecache_261.2.dr	false	0%, Virustotal, Browse	unknown
https://safety.google/security-privacy/	chromecache_287.2.dr	false	1%, Virustotal, Browse	unknown
https://support.google.com/communities/answer/7424249	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://schema.org	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_217.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_223.2.dr	false	0%, Virustotal, Browse	unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/communities/answer/7425194	chromecache_296.2.dr	false	0%, Virustotal, Browse	unknown
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/95464?co=GENIE.Platform%3DAndroid	chromecache_249.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_239.2.dr, chromecache_285.2.dr	false		unknown
https://content-googleapis-staging.sandbox.google.com	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://localhost.corp.google.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome/?p=beta_forum_hc	chromecache_313.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://fonts.google.com/license/googlerestricted	chromecache_311.2.dr	false	URL Reputation: safe	unknown
https://clients6.google.com	chromecache_223.2.dr, chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://play.google/intl/	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
http://localhost.corp.google.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/embed/tagging/install	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_207.2.dr, chromecache_198.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://support.google.com/inapp/%	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_261.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_313.2.dr, chromecache_249.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_197.2.dr, chromecache_296.2.dr	false		unknown
https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug	chromecache_287.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	support.google.com	United States	15169	GOOGLEUS	false
142.250.185.206	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
142.250.185.161	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.186.97	unknown	United States	15169	GOOGLEUS	false
142.250.186.33	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	plus.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.197	mail.google.com	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
142.250.186.101	gmail.com	United States	15169	GOOGLEUS	false
142.250.185.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530705
Start date and time:	2024-10-10 12:48:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://dsawuiohfd@gmail.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@32/210@38/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://support.google.com/chrome/answer/6130773?hl=en-US Browse: https://support.google.com/accounts?hl=en-US&p=account_iph Browse: https://support.google.com/chrome/answer/95464 Browse: https://support.google.com/chromebook/answer/1057090 Browse: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637 Browse: https://support.google.com/chrome/answer/188842?hl=en&ref_topic=7439637

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.184.206, 64.233.167.84, 34.104.35.123, 142.250.186.131, 172.217.16.131, 216.58.206.42, 172.217.18.106, 142.250.181.234, 142.250.185.234, 216.58.212.138, 172.217.23.106, 142.250.185.170, 142.250.185.106, 142.250.184.234, 142.250.186.170, 142.250.184.202, 142.250.185.74, 142.250.185.202, 142.250.185.138, 216.58.206.74, 216.58.212.170, 142.251.168.84, 52.149.20.212, 2.16.100.168, 88.221.110.91, 192.229.221.95, 13.85.23.206, 142.250.185.174, 142.250.186.168, 142.250.186.59, 172.217.16.219, 142.250.185.155, 142.250.185.219, 142.250.186.91, 142.250.181.251, 142.250.185.251, 142.250.184.251, 142.250.186.123, 216.58.212.187, 142.250.186.155, 142.250.185.91, 172.217.18.27, 142.250.185.187, 172.217.16.155, 216.58.206.91, 142.250.186.74, 142.250.186.42, 172.217.16.138, 142.250.186.138, 142.250.74.202, 216.58.212.155, 142.250.185.123, 216.58.206.59, 142.250.184.200, 142.250.186.142, 172.217.16.202, 142.250.186.106, 172.217.18.10, 20.242.39.171, 142.250.18
Excluded domains from analysis (whitelisted): ssl.gstatic.com, storage.googleapis.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, ogads-pa.googleapis.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&os Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Forgot email?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Sign in to continue to Gmail Email or phone Forgot email? Not your computer? Use Guest mode to sign in privately. Learn more about using Guest mode Create account", "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&os Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Forgot email?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Sign in to continue to Gmail", "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&os Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone"}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARpgrqflFXQ1tWRVsiWd3fPky5u1UKN0ExQgfFtuLQol8PjnAQLUGxIBKgmuAE2nTAvMeMboWm7xgQ&os Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone"}

URL: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph#topic=3382296 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["What is a Google Account?", "How do I create a new Google Account?", "Create a strong password & a more secure account", "Verify your account", "Control what others see about you across Google services", "Someone changed your password", "Be ready to find a lost Android device", "Manage your Location History", "Set up a recovery phone number or email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"How can we help you? Describe your issue Popular articles What is a Google Account? How do I create a new Google Account? Create a strong password & a more secure account Verify your account Control what others see about you across Google services Someone changed your password Be ready to find a lost Android device Manage your Location History Set up a recovery phone number or email address", "has_visible_qrcode":false}

URL: https://support.google.com/chrome/answer/6130773?hl=en Model: jbxai	{ "brand":["Google Chrome"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Browse Chrome as a guest Important: Only log into sensitive websites on devices of people that you trust. Owners may be able to gain access to your data. In Guest mode, you won't find or change any other Chrome profile's info. When you exit Guest mode, your browsing activity is deleted from the computer. Use Guest mode for: Letting others borrow your computer, or borrowing someone else's computer. Using a public computer, like one at a library or cafe. If you want to browse privately on your own computer, use incognito mode. You'll find your info and settings without saving any browsing history. Open Guest mode 1. On your computer, open Chrome. 2. At the top right, click Profile. 3. Click Guest.", "has_visible_qrcode":false}

URL: https://support.google.com/chromebook/answer/1057090 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Sign in as a guest", "prominent_button_name":"Sign in", "text_input_field_labels":["If you're signed in to the Chromebook, sign out.", "At the bottom, click Browse as Guest."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Use a Chromebook as a guest To use a Chromebook without signing in, you can browse as a guest. Guest mode is useful if you want to: Let someone borrow your Chromebook. Borrow someone else's Chromebook. Use a shared or public Chromebook, like at school or a library. Sign in as a guest 1. If you're signed in to the Chromebook, sign out. 2. At the bottom, click Browse as Guest.", "has_visible_qrcode":false}

URL: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph#topic=3382296 Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google' is a well-known brand with a strong online presence.", "The URL 'support.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'What is a Google Account?' is consistent with the type of support content Google would provide."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"What is a Google Account?"}

URL: https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU#topic=7439538 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Download & install Google Chrome", "Create or manage your Google Account in Chrome", "Sign in and sync in Chrome", "Make Chrome your default browser", "Use Chrome at home", "Sign out of Chrome", "Check location info & directions in Chrome", "Use Chrome Actions to learn more about locations"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"How can we help you? Describe your issue Get started with Chrome Browse help topics Download & install Google Chrome Create or manage your Google Account in Chrome Sign in and sync in Chrome Make Chrome your default browser Use Chrome at home Sign out of Chrome Check location info & directions in Chrome Use Chrome Actions to learn more about locations About search engine choice screens in Chrome", "has_visible_qrcode":false}

URL: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637 Model: jbxai	{ "brand":["Google Chrome"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Have a new tab open", "Continue where you left off", "Open a specific set of pages"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Set your homepage and startup page You can customize Google Chrome to open any page for the homepage or startup page. These two pages aren't the same unless you set them to be. Your startup page is the one that shows when you first launch Chrome on your device. Your homepage is the one you go to when you select Home. If your startup page, homepage, or search engine has suddenly changed, then you may have unwanted software. Learn how to reset your browser settings. Set your startup page You can control what page or pages appear when you launch Chrome on your computer. Have a new tab open Continue where you left off Open a specific set of pages Problems with your startup or homepage If you're on a computer and you find a homepage or startup page that you didn't set yourself, your computer may have malware. Learn how to remove unwanted ads, pop-ups & malware.", "has_visible_qrcode":false}

URL: https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU#topic=7439538 Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand name 'Google' is well-known and globally recognized.", "The URL 'support.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'Download & install Google Chrome' is consistent with the services provided by Google."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"Download & install Google Chrome"}

URL: https://support.google.com/chrome/answer/95464 Model: jbxai	{ "brand":["Google Chrome Help"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Manage tabs in Chrome", "Search the web in Chrome", "Set default search engine and site search shortcuts", "Download a file", "Read pages later & offline", "Visit a site by turning off Chrome's ad blocker", "Print from Chrome", "Browse in Dark mode or Dark theme", "Share pages in Chrome", "Share or link to quotes & text in Chrome", "Use web apps", "Control your music, videos, and more", "Test experimental features in Chrome", "Manage Chrome side panel", "Customize your New Tab page in"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Browse in Incognito mode You can browse the web more privately in Incognito mode. Computer Android iPhone & iPad 1. On your computer, open Chrome. 2. At the top right, click More > New Incognito Window. 3. A new window appears. In the top corner, check for the Incognito icon . You can also use a keyboard shortcut to open an Incognito window: Windows, Linux, or Chrome OS: Press Ctrl + Shift + n. Mac: Press Command + Shift + n. You can switch between Incognito windows and regular Chrome windows. You'll only browse in private when you're using an Incognito window. Third-party cookies are blocked in Incognito by default. You can change this at any time from the toggle on the Incognito new tab page or Chrome settings. Learn more about cookies. Close Incognito mode If you have an Incognito window open and you open another one, your private browsing session will continue in the new window. To exit Incognito mode, close all Incognito windows. If you find a number next to the Incognito icon at the top right, you have more than one Incognito window open. To close an Incognito window: 1. On your computer, go to your Incognito window. Help", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 09:49:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976756716005467
Encrypted:	false
SSDEEP:	48:8D/dqTW6KHMidAKZdA19ehwiZUklqehqy+3:8oXxpy
MD5:	51D6A568AB14C110B8D8D3FC112754B7
SHA1:	C08BECB7E9931CDE076870BBD86F82161F4054E7
SHA-256:	842FF6B68330B41F0CECDA3E093372E454865EA324E2DD1281469A9C7ACAC8BC
SHA-512:	297D5F4A6E0AD8D6F3575FAEB546C14DF5446665B1B3F16A095E9BAB0516FDBDA0202C2759D8D6AFAF848DD923451A2DDFEDA86BE3E142EA70B1458668356956
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y.P.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 09:49:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9911929190165374
Encrypted:	false
SSDEEP:	48:8OdqTW6KHMidAKZdA1weh/iZUkAQkqehZy+2:8rXD9QQy
MD5:	64EF6B4145F89463F415357951348D53
SHA1:	AAA8ECE3A8EC10EA5DDB2683EA437F49EC119AD1
SHA-256:	C59D76502DB0EAE7B4F2F56B847D468E3B279679C4D4971DF5F0072FCEFFF1F0
SHA-512:	FDEFA927007146CC64364790EC94A64D0786B49519A19AACFE56D0BDA1F297DCFD9D7248EB76B5ABFD422A7704A3F32297282E186CCBEA27BCEC3685176F0174
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......F.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005944468449847
Encrypted:	false
SSDEEP:	48:8xTdqTW6sHMidAKZdA14tseh7sFiZUkmgqeh7sny+BX:8xwX9n1y
MD5:	EC30DB63D4A2B30829FB1D127A6818E3
SHA1:	275EA301520C3CBAAAFE618C04DF15A1FDAAFF0A
SHA-256:	5DB4C9FB617AD3A467A085560D1A6904BB4BEE277D35E5E6D2370C1936037903
SHA-512:	6027B5C096C531DCD9C72EADA83BD1E46D98BC3136D59D187D0B76182845893E389FC8ED78F1E97C4633A784834822849DBBA317C766E7F74F7A81E8C444C8B9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 09:49:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9914135093415846
Encrypted:	false
SSDEEP:	48:8kdqTW6KHMidAKZdA1vehDiZUkwqehNy+R:85Xg/y
MD5:	01788ECB9D0D66FE68C564A20158F32A
SHA1:	C45E0B922FC3FBD3BF2808ACE4EC6509549598E2
SHA-256:	746DF4FA7F49B62ECEAB948B00E0734A4F0FD4B50B3AB8F64EC89E7199D09B98
SHA-512:	BB00C59FBC8E32A22AD8A171D269F76044A80548C4C7F5F8B1179AD99269B714601FE0FE8D0B66FC116E378C5216CCD5F9A2B43A259DA1662CBB458A55E2B759
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6B.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 09:49:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979619316973563
Encrypted:	false
SSDEEP:	48:8OdqTW6KHMidAKZdA1hehBiZUk1W1qehDy+C:8rXA9jy
MD5:	C9553E137ED8611CBAFFF1755F27FBF6
SHA1:	09E39AA6778ADDEBBCF82986CD54202768DBAC6F
SHA-256:	790E96D997DACB0CC836A770F66CAAF62E29191E94F0DC43A430AF717FE7E01F
SHA-512:	5A34EBC8EDED5CDBB6487C80502BECB6FE1B258CBB1A36B63FC3B09F80DF59A5A4B6650E53533BA7E7E8CB5DF20E3CC74BAC6CFE583EB6E270FFACEB4419501C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......L.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 09:49:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9909830941136213
Encrypted:	false
SSDEEP:	48:8FdqTW6KHMidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb1y+yT+:8iXOT/TbxWOvTb1y7T
MD5:	B34ACBDE213FF40378D2705CD933621A
SHA1:	F88F67E70A9AF6B1BD77B8E6AC75F5A3F64286A6
SHA-256:	FD7E9B6CB36CE012667E6452505FAFA3A070AB75FE80C17BA33FFB5A8FD79F99
SHA-512:	13A0EDCE29964DED743BE42A649F1EF930D2F326E938E73E5474EEB2AF9BDF03F9B85E618E47FFDBB291EEE4A4090345CA913259B972DB4DB8B2BB4B3501E750
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....);.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY,V....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY,V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY,V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY,V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........M..w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.635234743489788
Encrypted:	false
SSDEEP:	3:HniCnmzth+2KvmCG94kn:BmB3fFP
MD5:	401D5E1CF1BAA24568307B37011EC364
SHA1:	071548EE0903A91A7B82D909945AF8013EBC205E
SHA-256:	E3020826A1C927C113F258C9EC695D776841985F4747D42DCAC94BEF1F07C0CD
SHA-512:	766D35602E89DA0734560F4DBB5ECE6C8AB390C7509A330F9153AC6F79CBF528B733079406045B92C4585E0BE9B6171918AA2E540000199C943E2F626CAA6051
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoJCgcNaUhHRxoA

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.479603237367378
Encrypted:	false
SSDEEP:	48:o7YAIx00suAuYbdjTQ929Y4WfQ4pksFhP606Lvz7Xjv7I5B7+zVag91P7gFMwrw:o0AIx00sXFh/q29oftpvv/UDLLoMEw
MD5:	9D1BCDC903DD5EB217C2D67ACD6DB47C
SHA1:	A16BE44C9DA1C922650DE782AB76F55BD0D692BB
SHA-256:	49B1FAB2085EA92365AE2B567A60399CC9A037E0A5A8B3418DC820F1F73587D8
SHA-512:	E527A53F972568DF44E0AF0E28B53A0F04D435CCD7EB108B89098887BAA475679FD7AA43E995D7B37719E510C40E838B2AF09C9EA89AAEEB6F054CFF25EE4DD9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var jya=function(){var a=_.Ke();return _.Uj(a,1)},hu=function(a){this.Da=_.u(a,0,hu.messageId)};_.K(hu,_.w);hu.prototype.Ha=function(){return _.Mj(this,1)};hu.prototype.Ua=function(a){return _.ek(this,1,a)};hu.messageId="f.bo";var iu=function(){_.tm.call(this)};_.K(iu,_.tm);iu.prototype.yd=function(){this.XT=!1;kya(this);_.tm.prototype.yd.call(this)};iu.prototype.aa=function(){lya(this);if(this.RC)return mya(this),!1;if(!this.eW)return ju(this),!0;this.dispatchEvent("p");if(!this.OP)return ju(this),!0;this.RM?(this.dispatchEvent("r"),ju(this)):mya(this);return!1};.var nya=function(a){var b=new _.op(a.n5);a.yQ!=null&&_.Un(b,"authuser",a.yQ);return b},mya=function(a){a.RC=!0;var b=nya(a),c="rt=r&f_uid="+_.zk(a.OP);_.on(b,(0,_.eg)(a.ea,a),"POST",c)};.iu.prototype.ea=function(a){a=a.target;lya(this);if(_.rn(a)){this.lK=0;if(this.RM)this.RC=!1,this.dispatchEvent("r"

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	7.507500083049312
Encrypted:	false
SSDEEP:	12:6v/7usW8F8q0XW32k3hFGIqpOpsFQRJWutLUe7XAO/b1SKT1:Bq0XW3H35p3R8utAeTAOZSy1
MD5:	0E7D27F6C5C957880E631FC98144B897
SHA1:	BEA8DFB7CF588CAF5B2C98A3744F9B367EEBF65B
SHA-256:	B2C36462B54E7D9344E9E6A18B6EA2CCAC84A684BA73CABB638B0C756017E919
SHA-512:	BFC17A0405C5509FE894C6A322782821B157E0570BD08CFB809BC5FC8358CFF099DE3B0EBC3C961E48C9B456DDB46EC30E6997D40702C1AEA4ECFBFDA5EA4912
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8...MH.Q...o7V....K.!..a...u.:.I..z."h..^...].>. E...9."..6....,...Z....{..7..7.-........~.....B.^....n.w3.L}....@.c..F.qG.........j.......9..5.L. .t:.G..P...p.W.aX.P<..z..!.[..F...Q..]6....f.........B(..Z....z....f.z*.J...:A..........}R,.e1Y....j.9...l6/q..d2.,...<.O.....p.Y..y^.....o-.....c......Z..t:}'....px..-...3$.@.w-A.a1..x%..\2.C..Y[?.......F..dP...E>b.....D..-....n...o...#...m .. .y........S...$.H$.2..M.i../..........x'.(]M.....<...B..\|.V...5.e.r......`.Z...\\|..V.Q..89....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	141
Entropy (8bit):	6.003288945245843
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xtxshx/Fxpeh8uCKEnN3VIlqM2Om2h2ru/Sxl/B1p:6v/lhPXxAxjMh/CfN3V+2Kh2sSxtjp
MD5:	1220763DB56CFC86AFBC5D81EE8A9EA9
SHA1:	05414C177ABC67E5353445B1470F643A782EE0D9
SHA-256:	5279E86A981276A27B8EC0D13F34229B289BAC00CCE0932CD67E6A71F6439201
SHA-512:	4068F1A5C50E1723DCA31BDB65A25E9D42EB272116320D692B31F0FCE47AB4111FFA875895E1FC15724DAC8C12F98433F82C4B0F40848432FC1962C4FF28B12C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...TIDATx.c..T.to.(..(PT.......KP-...{...0-."..`..jASNX..r.Z..).@.I.{.p.R.q....od...Zw.._Y.....IEND.B`.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	192
Entropy (8bit):	6.254651473237728
Encrypted:	false
SSDEEP:	3:yionv//thPljll8llkW8LtsF9jNFBsPcvsgKRl/aLQw1soQUVmmGv8DbpglH1p:6v/lhPW/kW8ROFBsPIPKRlCWoQUVRGwY
MD5:	6EB92AB5A3C438EED61EE756BEBBAE90
SHA1:	0A9AB347DF3F8649C15BF3CC66DC09A62DFA7BAD
SHA-256:	A834E710FF494BF7B160E1F8A93F67433EAF66DF1DF2660ACD868A4A44FAE88F
SHA-512:	5A2AB9716205A2B94FF2785FD1F579EB07CAC4C59C5029C95F270C348D43654A32113DA148DC7C055D009C9EF21643E39DA9DA18BB7BEC50151D3F3C1CE2CF75
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V.W....sRGB........zIDAT8Ocd..`..9... ...C......../......:..y...9..nG.30J.2......;wY..Q. ..BCC.W.^...k`....L......".j..H.....e.....n.fZJ}....Z..L......IEND.B`.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3653
Entropy (8bit):	7.928890449325803
Encrypted:	false
SSDEEP:	96:5kxUHWOwsRWCbRykZguODi897DRqAi4+1RMF7XmJQMEw:5fjAARyG389DRqAif1GsCbw
MD5:	9C63745DD58E622C67B763C56B04E0EC
SHA1:	3DF427B09C21120DA55F6EF396BC19C3A567F76D
SHA-256:	CCB7B6FC6814D838946C52D17A82BB3E6B9AD2C9DB3D6207CEB17C34241BC4FC
SHA-512:	D905BECD98E97E8CF7C9F5FA94804AA1154AFAA9C34DD671494EDC1562A9DE44B2472EDB17F4BD855463B4C7CF3D67B9006D5D2923A4E6688212E62651963D20
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64
Preview:	.PNG........IHDR...@...@......iq.....IDATx^.k...u...v.s./..Co.....B..%..7.!...!\.....N.Pvl..@.R.I.V,.1...CLR6..!$!....g....$..v...G?..4....xvV.$...kzzf?....{.t....#}$.y....^....]7.8..<.m.K'l..gF....p.%.Am...N.....g.r.cmJ...........".G..<.>j...:.........s.I6...qDg.B."P@.X...R-./..........'...V...P..u.E..37k.]..7.Z..6....;J...T.A...9a..{>....pa6..ZV../.....2\......D.H8w.=..w3.....u.e.a.G./.C.T9....8..M..-..0....a....7..... .~...V"..........+..M.-r....]...s\.F../...D.Vl.....r7m.5.?9........M...'%W...^.\|.RE.........x..#b...}.x#.q'W.`#.h.C.\.........M..I.:.v...[E.h.25......!..k..\|X.Xy.II'....7V.l.YT-V.L...HI..4..?...j..I#.....m.^.....\|...H.P...?kK.lH.<r...{V..-X,!q...P=8.T....}......._@.9T.......O.........Bi_.J...c.>#T...cUl..tJf.._.......7.......,.B.X.(....O...h-..w..$S.O..o..\.h..?..\|..a.Y.j;.Voa...1.U.U...A....1F.Up..*...`.:.L.....b....?....E..d..`Q TET.@..I.OA.TAL..Z.....p../-...{......pG.....%kw0gk.#.CJ.5.F.1.. "8"...DF..G..J..Ij.Y4.9.d{

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	6.808806987152524
Encrypted:	false
SSDEEP:	6:6v/lhPXbA73DObS7XG8UyHzt7pvik6Gk6x0dRqbLwoBWfp:6v/7o3SbkUyVZiOB2IHNWx
MD5:	C6849EC5588A3C51C7E113BB4688481A
SHA1:	3CBF513D277015624A9BAE606C8819934A6A742D
SHA-256:	11EA45860601CF37A34F893CEEEAEBA8FA55A92D5FF34293B08786936DA1DFDE
SHA-512:	722BF73250590F1490CAA72A1FF1E3320E882DDC47B4E7046A103CF54AE4A6E9A4207AD1430D89831B37B66F642C28933CB11FE5D8650022F319798434AE285A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/Zv0iMGyZkxcm-PjpHG8tvHBQtW0g2SV59s0pWblj5vYThdjslgYYr7x9CP6fxCzv27M=w36-h36
Preview:	.PNG........IHDR.............J~.s....IDAT8..1..0.E#1..p....r.....@Lp..P`...B$w..T..CU{..Kl.+.......0q.*Nh..3-.I.h..Z.4.-...5c9.^...=m......a<..B.i%.9.,..4....0.....>...\|.(.t8.!.t..c@...4b...bCX...@.... .w.=.IY...H........XM......IEND.B`.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.308347802561222
Encrypted:	false
SSDEEP:	96:oo5mEkAVSoYSvSgNBTeLZBagj9PIauzLmybxf8Vh15b6r/Nm2TmpI6qLw:N4lAFDLxAPSVaGZ+yc
MD5:	6A2A5DC595FA915688C2C15E9064AA76
SHA1:	487184814F226A80611F104C57D106039CD6E1D3
SHA-256:	24744179DFE1C2C520A76978B7071234322C995EAE18BB0050DFB490BCB51B2C
SHA-512:	70ED0557426BB994F5D4BD849AC47C1D73726443A7D8B126D66186857A0216F19134EF77CF0116D57DA524A9E22703D2CC3173AA6D3E243BD45A387EAAC8B475
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xNa=_.z("wg1P6b",[_.cB,_.Nn,_.Vn]);._.k("wg1P6b");.var q6a;q6a=_.uh(["aria-"]);._.BJ=function(a){_.Y.call(this,a.Fa);this.Ka=this.xa=this.aa=this.viewportElement=this.Na=null;this.Ic=a.Ea.ef;this.ab=a.Ea.focus;this.Ec=a.Ea.Ec;this.ea=this.Vi();a=-1*parseInt(_.No(this.Vi().el(),"marginTop")\|\|"0",10);var b=parseInt(_.No(this.Vi().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.ff(this.getData("isMenuDynamic"),!1);b=_.ff(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.ru(this,.r6a(this,this.aa.el())));_.sF(this.ta())&&(a=this.ta().el(),b=this.we.bind(this),a.__soy_skip_handler=b)};_.K(_.BJ,_.Y);_.BJ.Ba=function(){return{Ea:{ef:_.gF,focus:_.SE,Ec:_.Au}}};_.BJ.prototype.JF=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.Dz)?(a=a.data.Dz,this.Ca=a==="MOUS

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	dropped
Size (bytes):	3019964
Entropy (8bit):	7.960852973877143
Encrypted:	false
SSDEEP:	49152:RA5LG758mqDsNR4rmlFIBg/4vuaVB8v42psIu+djH03PYTjapvB8TdHI8tCl2GxE:CtG75DmdrmlFIS/2zrMsqH0fYTepeelI
MD5:	530E1468CB2FDBB27DB213E81FC43EAE
SHA1:	E2E94CB2AFE2AF4237A70B610A33260DF36E7814
SHA-256:	7A1BD9B4E306B69DF41292FCF1408EBBC9F7A505FECF5543D53A6124B072992B
SHA-512:	549F80CA50F89B0009DDE0C847FB6F47D1E27D157E646D0A7139F997FE0AC13695648CDEA6EE10EA772C999A2DB3051834270EB1DC728D807952252564001FEB
Malicious:	false
Reputation:	low
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8..........................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.Mt.F..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8868
Entropy (8bit):	5.130440294070798
Encrypted:	false
SSDEEP:	192:5H4HcHGr9uIHROschHoqPHyHRuHq/Hp+8HObKuHPHk:6rr+cf
MD5:	D0A7B8CC43AA9D9BC37980573186F668
SHA1:	67262D9435233DD70B6713ABE6DAC956ADFAE617
SHA-256:	F94934A2AB404905A25CAF02219F22337610B659D73A72C82EE8287D698BFD0B
SHA-512:	5FE3D2316D6661BF22D831263E0232F8AACCA2042D53255C3AC15E3C652EEEC60C8E29D6EA53FD587A41092248067E69786D42147151599CEC865E6C0094FECE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	32503
Entropy (8bit):	5.37855177416442
Encrypted:	false
SSDEEP:	768:mDhJ1UQSeQl9Hx+esIvw9f7y4hRloZDAMwXbesyNFD/p5j2jDxgw8L:6IJsIZoRloZDGbgFk1AL
MD5:	33911E34DA0A8BC64B0E26E58F3CBCDD
SHA1:	F2707EF382382D1D0FE1B0443FB111416D43A7EC
SHA-256:	1A223ED2252ED2B0461A31FDB09943861FE40AA47D3B8D337C841AB87CE4F0F5
SHA-512:	AEFC12082D2648A4854056167B78C4717C6917995C7F0936E3E8A7E5B35284363BFAE28B5AF2452698B1B69973A522918B308350CEAD7F5BE19595CBF8D0CC0D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Gua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.op("//www.google.com/images/cleardot.gif");_.zp(c)}this.ka=c};_.h=Gua.prototype;_.h.Yc=null;_.h.FZ=1E4;_.h.rA=!1;_.h.vQ=0;_.h.MJ=null;_.h.oV=null;_.h.setTimeout=function(a){this.FZ=a};_.h.start=function(){if(this.rA)throw Error("dc");this.rA=!0;this.vQ=0;Hua(this)};_.h.stop=function(){Iua(this);this.rA=!1};.var Hua=function(a){a.vQ++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.wm((0,_.eg)(a.hH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.eg)(a.bka,a),a.aa.onerror=(0,_.eg)(a.aka,a),a.aa.onabort=(0,_.eg)(a.Zja,a),a.MJ=_.wm(a.cka,a.FZ,a),a.aa.src=String(a.ka))};_.h=Gua.prototype;_.h.bka=function(){this.hH(!0)};_.h.aka=function(){this.hH(!1)};_.h.Zja=function(){this.hH(!1)};_.h.cka=function(){this.hH(!1)};._.h.hH=function(a){Iua(this);a?(this.rA=!1,this.da.call(this.ea,!0)):this.vQ<=0?Hua(this):(this.rA=!1,

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54324)
Category:	downloaded
Size (bytes):	1208545
Entropy (8bit):	5.714771293632796
Encrypted:	false
SSDEEP:	24576:kNzQIiVqIDTUuoyEggk1yFSydCkzmfBx6H9l/Li0ocL3aCnrXeVFR04zhKWGSm:kNzQIiVqIDTUuoIByFSydCkzmfPmXKF8
MD5:	25AB896E60D6CDEE2238BAF16C4E3AB0
SHA1:	BFB7B848762336269BCD5A9E1A38CE6AB7716857
SHA-256:	B260B2036605F804721A631FD9ADF74B42E839E243230E0BE46917591912110B
SHA-512:	A546B4E135FD118AE00B24FE5051E4BECAAEF436A0AA575620E89C6285D7CEDEE9749F7231AEA9FAA59D243394B6DC24B648AE147A13490E2D6466D0C318C7EF
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/188842?hl=en&ref_topic=7439637
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Create, find and edit bookmarks in Chrome - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Create bookmarks so Chrome can remember your favorite and frequently visited websites. When you sign in to Chrome with your Google Account, you can use bookmarks and other info on all your devices." name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/188842?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnq

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	698006
Entropy (8bit):	5.599436347575253
Encrypted:	false
SSDEEP:	6144:ThYuh7JLIp/M5HiWXvTbGS6eQaUHA9kegY0TElnc5fiCEcyzhwJWSJvK:TJJ9IpMdXL0kgY0TEh
MD5:	93AFEF1A0825ED57957514CA92AA4C6B
SHA1:	D5A5E31E76D2904947AA1D358C7E08F0692F5761
SHA-256:	74C842BB9A79095F06E5C8A588948A6E95DF14304D2A8FADF6DA286AD4A475EF
SHA-512:	BA9B745156488A39FB8F61053F7792398D5A51F46EB5A101E78C863E4AFF0C3BE4018E63677A0B04EAEF0BED29682926D4CD6AFB6905B58D9CD7C4D630A0CCC0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.359967758014897
Encrypted:	false
SSDEEP:	48:o7PnnaqWVVKIQ5jNQ8jsAA0BAow4ZT+JdD+rAp2KLE1Bv75WgBrz81VJYrw:orX8UF5jOF/864M2KLkR79xOcw
MD5:	4EB3C32312A283D14E7EFC1B9CD74C0C
SHA1:	38B45A2BE651DE6E2718C03DCE4C4A957533A60A
SHA-256:	181A17B2CF11A35C9BBC32813724CFA15D0C46C116C59BB2DB8C543CA185D8A5
SHA-512:	DAEFD3CDF2A0BA40B3E15AD455E942AEFE6F0749C0DBAE2BB2FDADEC58AB24F415067D66EE28EE106DE786546AC0F1A892FB2F1507C6BD9862FA63A0C78E40B7
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var qA=function(a){_.W.call(this,a.Fa)};_.K(qA,_.W);qA.Ba=_.W.Ba;qA.prototype.qS=function(a){return _.af(this,{Xa:{sT:_.wl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.vi(function(e){window._wjdc=function(f){d(f);e(iKa(f,b,a))}}):iKa(c,b,a)})};var iKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.sT.qS(c)};.qA.prototype.aa=function(a,b){var c=_.Nra(b).Wj;if(c.startsWith("$")){var d=_.sm.get(a);_.Dq[b]&&(d\|\|(d={},_.sm.set(a,d)),d[c]=_.Dq[b],delete _.Dq[b],_.Eq--);if(d)if(a=d[c])b=_.df(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.wu(_.Rfa,qA);._.l();._.k("SNUn3");._.hKa=new _.uf(_.zg);._.l();._.k("RMhBfe");.var jKa=function(a){var b=_.Cq(a);return b?new _.vi(function(c,d){var e=function(){b=_.Cq(a);var f=_.Yfa(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	1970
Entropy (8bit):	5.2966551470963585
Encrypted:	false
SSDEEP:	48:o7ywaGR3cL3A4FUA6E4gsusR7dO/Ufaw/3K/roo8osTCErw:oDMLHFwzDU/mm0HfCAw
MD5:	A4B059C3E9299DF351F8DCB87B451950
SHA1:	719E58AE96078AD8D0EB9BD74F346894C10363FF
SHA-256:	C4158E03E5693AC0059A7C7925133A99440076FE225DECA31D9DEA1EAE84C7DC
SHA-512:	320885EFBFA877AA96207CE385BD3FB49B04F8B9AAFF65A853F3C5CC1ED83C4720749BE761A8F93D2238AA7F3D3DC9E28BB25ED6E67E64108072C226E762012E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.LZ=function(a){_.W.call(this,a.Fa);this.window=a.Ea.window.get();this.Oc=a.Ea.Oc};_.K(_.LZ,_.W);_.LZ.Ba=function(){return{Ea:{window:_.zu,Oc:_.LE}}};_.LZ.prototype.Yo=function(){};_.LZ.prototype.addEncryptionRecoveryMethod=function(){};_.MZ=function(a){return(a==null?void 0:a.So)\|\|function(){}};_.NZ=function(a){return(a==null?void 0:a.C3)\|\|function(){}};_.yQb=function(a){return(a==null?void 0:a.Wp)\|\|function(){}};._.zQb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.AQb=function(a){setTimeout(function(){throw a;},0)};_.LZ.prototype.uO=function(){return!0};_.OZ=function(a,b,c){a=a.Oc;var d=a.pO,e=new _.AE;b=_.Dj(e,7,_.YVa,b==null?b:_.Oc(b));d.call(a,305,b,c,void 0)};_.wu(_.Ln,_.LZ);._.l();._.k("ziXSP");.var f_=function(a){_.LZ

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	97
Entropy (8bit):	5.336991931003171
Encrypted:	false
SSDEEP:	3:yionv//thPlT/XtNsyxdxFxk+baSkpkl/2up:6v/lhPXNB9FxkkJeup
MD5:	114E0F27AB7C461224303644FA3EB89D
SHA1:	5504053F373E6496680125CB2D4A8A9F437968B8
SHA-256:	E3CA966E54B53DD010FF2DC0023813647AC9DA72774192E2937BF906AD1139E3
SHA-512:	A3A186FD9BFCE07D3B5979DC8AAF4917595993F7D3B52DFF7355CBCFC26AAFEA3FDE958BD186D5D0ECB18595F68F398B64E21F291A1C052573521768957209AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...(IDATx.c.....9.......?.>.......FCi4..)..?.:....<....IEND.B`.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	downloaded
Size (bytes):	23298
Entropy (8bit):	5.4191224553622295
Encrypted:	false
SSDEEP:	384:yD1lVh+Jbv21XYx0LqOnZ8CcG6g88mzdMDr8C/NbpQc9wI:yD1lVh+z8q26CjUzort/NbGAwI
MD5:	3E81E9F957CE433AF27702329B059853
SHA1:	D442F984DFA8415FC892343775175D201229587B
SHA-256:	24AAA7CC46085EC12DB355AB7482B3C6F355F3250900D0EE9C5A70A6969B1E93
SHA-512:	B6938721EB785228C73BC011D8985FE8644499F12EF24D361B8C7E0E7E7946C526021F726E4192300E997C892B9DDD5C1B5559469407A1940B6CFA8F89783016
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Du.prototype.da=_.ca(40,function(){return _.Cj(this,3)});_.iz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b};_.iz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.jz=function(){this.ka=!0;var a=_.Gj(_.pk(_.Fe("TSDtV",window),_.Hya),_.Du,1,_.zj())[0];if(a){var b={};for(var c=_.n(_.Gj(a,_.Iya,2,_.zj())),d=c.next();!d.done;d=c.next()){d=d.value;var e=_.Sj(d,1).toString();switch(_.Ej(d,_.Eu)){case 3:b[e]=_.Qj(d,_.uj(d,_.Eu,3));break;case 2:b[e]=_.Sj(d,_.uj(d,_.Eu,2));break;case 4:b[e]=_.Tj(d,_.uj(d,_.Eu,4));break;case 5:b[e]=_.Uj(d,_.uj(d,_.Eu,5));break;case 6:b[e]=_.Yj(d,_.kf,6,_.Eu);break;default:throw Error("kd`"+_.Ej(d,_.Eu));}}}else b={};this.ea=b;this.token=.a?a.da():null};_.jz.prototype.aa=function(a){if(!this.ka\|\|a.key in this.ea)a=a.ctor(this.ea[a.key]);else if(_.Fe("nQyAE",window)){var b=_.Kya(a.flagName);if(b===null)a=a.de

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	6.003288945245843
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xtxshx/Fxpeh8uCKEnN3VIlqM2Om2h2ru/Sxl/B1p:6v/lhPXxAxjMh/CfN3V+2Kh2sSxtjp
MD5:	1220763DB56CFC86AFBC5D81EE8A9EA9
SHA1:	05414C177ABC67E5353445B1470F643A782EE0D9
SHA-256:	5279E86A981276A27B8EC0D13F34229B289BAC00CCE0932CD67E6A71F6439201
SHA-512:	4068F1A5C50E1723DCA31BDB65A25E9D42EB272116320D692B31F0FCE47AB4111FFA875895E1FC15724DAC8C12F98433F82C4B0F40848432FC1962C4FF28B12C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36
Preview:	.PNG........IHDR.............J~.s...TIDATx.c..T.to.(..(PT.......KP-...{...0-."..`..jASNX..r.Z..).@.I.{.p.R.q....od...Zw.._Y.....IEND.B`.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	698006
Entropy (8bit):	5.599436347575253
Encrypted:	false
SSDEEP:	6144:ThYuh7JLIp/M5HiWXvTbGS6eQaUHA9kegY0TElnc5fiCEcyzhwJWSJvK:TJJ9IpMdXL0kgY0TEh
MD5:	93AFEF1A0825ED57957514CA92AA4C6B
SHA1:	D5A5E31E76D2904947AA1D358C7E08F0692F5761
SHA-256:	74C842BB9A79095F06E5C8A588948A6E95DF14304D2A8FADF6DA286AD4A475EF
SHA-512:	BA9B745156488A39FB8F61053F7792398D5A51F46EB5A101E78C863E4AFF0C3BE4018E63677A0B04EAEF0BED29682926D4CD6AFB6905B58D9CD7C4D630A0CCC0
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.56865329157797
Encrypted:	false
SSDEEP:	12:6v/7WYs1eiaCWtFZNDfdWpGK9/N0eYkbIkZlcVwNkc:N7ei+PR1WAMN0eYWInVZc
MD5:	80F03F4B309056CDA71A7E6469BCCEE6
SHA1:	0108A567FF39D0B9E273F336C1D8AC7AE5F700B2
SHA-256:	1D80F0E2A49BA079AE22007AEB759A5903D45DDF1BC5A707BF129BE328F3CC5A
SHA-512:	111C8A794367FC6283EC3C64A4B1E9DE5D70E9324AEC0E461B4407BCF9F563F0A4FCED4FDFA2826D9299B8851B08B44AD244E53FC36AF4D304815348FAC93E04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH..Mk.Q.......:-&Y.n...ih..P.U.&...,.B.F...<....(...n.qeu...R.tk...j7......V....L.I].=..{.9...8..j.-,.$.leF...0qf.T7H....^3.M,.......PfP.......2.8VG..p.Y3HN..L..Q..dR....#.C.kw.G....W#H..3b.z$Z..8...v....[x'[..g...Y.7.:......#+0..ge30F....;h`.'..L...v..\.h.2..e.S.^.qN.}Z.Q....5..W.e`... .E...^OKs.O.."...).F.#..29... B.~.Y.......gD..@oxEv...$.....>.%..=....k.ajl.....&J.....-Q..F.->...T;u'.@6...v.0.r...>."..L.O.......m.....^...~..iW.c..w.$!.<`;]....9B.y..@.=<%.kkp..4El.43....\W.I.o..-].)6G9C+.pRg.+W..._.d.y..W.....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.479603237367378
Encrypted:	false
SSDEEP:	48:o7YAIx00suAuYbdjTQ929Y4WfQ4pksFhP606Lvz7Xjv7I5B7+zVag91P7gFMwrw:o0AIx00sXFh/q29oftpvv/UDLLoMEw
MD5:	9D1BCDC903DD5EB217C2D67ACD6DB47C
SHA1:	A16BE44C9DA1C922650DE782AB76F55BD0D692BB
SHA-256:	49B1FAB2085EA92365AE2B567A60399CC9A037E0A5A8B3418DC820F1F73587D8
SHA-512:	E527A53F972568DF44E0AF0E28B53A0F04D435CCD7EB108B89098887BAA475679FD7AA43E995D7B37719E510C40E838B2AF09C9EA89AAEEB6F054CFF25EE4DD9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var jya=function(){var a=_.Ke();return _.Uj(a,1)},hu=function(a){this.Da=_.u(a,0,hu.messageId)};_.K(hu,_.w);hu.prototype.Ha=function(){return _.Mj(this,1)};hu.prototype.Ua=function(a){return _.ek(this,1,a)};hu.messageId="f.bo";var iu=function(){_.tm.call(this)};_.K(iu,_.tm);iu.prototype.yd=function(){this.XT=!1;kya(this);_.tm.prototype.yd.call(this)};iu.prototype.aa=function(){lya(this);if(this.RC)return mya(this),!1;if(!this.eW)return ju(this),!0;this.dispatchEvent("p");if(!this.OP)return ju(this),!0;this.RM?(this.dispatchEvent("r"),ju(this)):mya(this);return!1};.var nya=function(a){var b=new _.op(a.n5);a.yQ!=null&&_.Un(b,"authuser",a.yQ);return b},mya=function(a){a.RC=!0;var b=nya(a),c="rt=r&f_uid="+_.zk(a.OP);_.on(b,(0,_.eg)(a.ea,a),"POST",c)};.iu.prototype.ea=function(a){a=a.target;lya(this);if(_.rn(a)){this.lK=0;if(this.RM)this.RC=!1,this.dispatchEvent("r"

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15996, version 1.0
Category:	downloaded
Size (bytes):	15996
Entropy (8bit):	7.989012096227512
Encrypted:	false
SSDEEP:	384:nH4UArsQ/nHYjtuHgovTC+H+b23+kMw/KjK0TQ59u98pgQXk:nYZQjtuHgYGbrMyjDiJXk
MD5:	CC536892EABDE0EAEB81493BDA8E189A
SHA1:	15C0180AD7BDF9D0F963747447BC9446FC42D2DC
SHA-256:	97399A2914C593DA2895D9729AA0170A1956E91EE54CF7550696691949558A37
SHA-512:	94F605C4C4FE76EBDB2D5428C6BA69F83B75C65B6932251C0C3E90F92CC1F421FD9F15E81D5985693DC564B8644D90A26DA3E9C63976CF5862ED54D5ED0C4320
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......>\|..........>...........................<..:..:.`..:.....p..~.....6.$..(. ..>..N.....5xn.u..b.....c..<..Rw.H..q.(.....9A...^.=h.%J...4.\.\.[....[....h.j..AP.....a..]N.o....6.a..uO..R.\|o...wO..t....s....^F...Oy....IN^..X...9sg...(;..L.....5.s~...?....%.0.f....b.. ..;.. "k+.v`.....1kq.\mqLp.]\|..Z\..O......=.......h..,u.................y.h.o.Z..%.....g#..B......V...3.r....J..>g.-rU?+.3A.....C...... .21..f...Z.......P..o..g\.b... v...6..0...b.....?..-WL...Z2...1..Q./....... ..C..G.^r....O......io;.o..4.<....7.Pm..!.Nu.=..Oc............e.w.g.....,...c...0V.P...R.){..u...>.fi..S.w.G...-..... $.8......w..hp...T@..Go....).......;.....B.)..p.\.?.-KC.S.5..pX9...'.!.-....R.Sg.>x.o.yP......S....a...m<.+".t%..3x.?3M;....k.....I&I.3g.26...p...}~....X.x..G.<)..k..U....AZ..A@....Cu..Tv{...\|v.04H.$Xc..E.)<...!........^..~.7P.u...xH..rX..8O....y.k(...0.p 0.%.U...Z...%...\|LlUJ.]L_...9..AX.$E.$.sa.(v8L!...rc.-....I..W..........^U...@.....3P............M..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.249392304721585
Encrypted:	false
SSDEEP:	24:kMYD7DWQuDORqMSsNrmYK0/9gs7hz1x7vDT/wVJOWaeGbZEsGblSFzM8OVLprGJ:o7DYDORIQ9RX6paeGbisGblS+vrw
MD5:	5B7E4EAF4C0AFDF5404499D594AE353B
SHA1:	CA4D5D4D43AB6B806374914E0D4638E8193C9619
SHA-256:	180858AA19EA935EA20E0339FB6CAD3FE20C685905A3C1F3DDD624FEB094E819
SHA-512:	5A924D708597999B2D7F28D766EEA2C2D5570980F9C1A30600DB921555D25F4236E03CF4D81AD5949656327B568F4F01B6B82ED53C8E2DABD2935C27E8618968
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.n_a=new _.uf(_.Lm);._.l();._.k("P6sQOc");.var s_a=!!(_.Th[1]&8);var u_a=function(a,b,c,d,e){this.ea=a;this.xa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=t_a(this)},v_a=function(a){var b={};_.Ma(a.VS(),function(e){b[e]=!0});var c=a.DS(),d=a.KS();return new u_a(a.zP(),c.aa()1E3,a.iS(),d.aa()1E3,b)},t_a=function(a){return Math.random()Math.min(a.xaMath.pow(a.ka,a.aa),a.Ca)},WG=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var XG=function(a){_.W.call(this,a.Fa);this.da=a.Ea.WV;this.ea=a.Ea.metadata;a=a.Ea.sha;this.fetch=a.fetch.bind(a)};_.K(XG,_.W);XG.Ba=function(){return{Ea:{WV:_.q_a,metadata:_.n_a,sha:_.g_a}}};XG.prototype.aa=function(a,b){if(this.ea.getType(a.Nd())!==1)return _.dn(a);var c=this.da.rV;return(c=c?v_a(c):null)&&WG(c)?_.Eya(a,w_a(this,a,b,c)):_.dn(a)};.var w_a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	210732
Entropy (8bit):	5.53743385567865
Encrypted:	false
SSDEEP:	3072:L4KAkKLX3WPB5g+dH0ZK7PZ+tDCnreTpD5372CnXWhl:cKG3+DH2okpD5372CnXWb
MD5:	8B4EAE1C67031569486866EE593A1056
SHA1:	303AED68E46BD5799F5B7EDD3E436E800FEB93A0
SHA-256:	E8411DB367A913773D6476658EF1544D0CE3F30E5D0274AA3701EFA3F49EC57D
SHA-512:	674786D140D3C1FD80D9C5D6B7B04CF5B88D11D9722D3B8C1FCE2016AF9F926B825CB42639CBF62B0632B5383607833F843F4CAA537D2230173769CDD8B36844
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	746088
Entropy (8bit):	5.792087136477159
Encrypted:	false
SSDEEP:	6144:RHQ91RRdao8gjqXWTY/966mmY6Ed8UCMb:R0yM/CMb
MD5:	E04548BBF8093E441914F95AD6030310
SHA1:	6AADAE2EEF689AA2CBF4112E36CAE2B1B882EF2D
SHA-256:	04355672E609CFB0B35AC29999AFFDA3072361528AC32AEAF4CD8032D4648A48
SHA-512:	D60AA1F724CFD75890F05690EB138F839E349D8D83DB8A30C03C0985CF226945CB9C14C2FCF26D4277408EA31EBCC14389F8D933071F85542801FF74280D4E53
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1460c1e4, 0x10234c32, 0x39e1fc40, 0x24501e80, 0x1c840, 0x0, 0x30000040, 0x3a000006, 0x31, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Na,Ta,gaa,iaa,jb,qaa,waa,Caa,Kaa,Maa,Paa,Jb,Qaa,Ob,Qb,Rb,Raa,Saa,Sb,Taa,Uaa,Vaa,Yb,$aa,bba,ec,hc,ic,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Qba,Rba,Sba,Tba,Pba,Uba,Wba,dd,Yba,Zba,aca,cca,bca,eca,fca,gca,hca,jca,ica,lca,mca,nca,oc

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.359967758014897
Encrypted:	false
SSDEEP:	48:o7PnnaqWVVKIQ5jNQ8jsAA0BAow4ZT+JdD+rAp2KLE1Bv75WgBrz81VJYrw:orX8UF5jOF/864M2KLkR79xOcw
MD5:	4EB3C32312A283D14E7EFC1B9CD74C0C
SHA1:	38B45A2BE651DE6E2718C03DCE4C4A957533A60A
SHA-256:	181A17B2CF11A35C9BBC32813724CFA15D0C46C116C59BB2DB8C543CA185D8A5
SHA-512:	DAEFD3CDF2A0BA40B3E15AD455E942AEFE6F0749C0DBAE2BB2FDADEC58AB24F415067D66EE28EE106DE786546AC0F1A892FB2F1507C6BD9862FA63A0C78E40B7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var qA=function(a){_.W.call(this,a.Fa)};_.K(qA,_.W);qA.Ba=_.W.Ba;qA.prototype.qS=function(a){return _.af(this,{Xa:{sT:_.wl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.vi(function(e){window._wjdc=function(f){d(f);e(iKa(f,b,a))}}):iKa(c,b,a)})};var iKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.sT.qS(c)};.qA.prototype.aa=function(a,b){var c=_.Nra(b).Wj;if(c.startsWith("$")){var d=_.sm.get(a);_.Dq[b]&&(d\|\|(d={},_.sm.set(a,d)),d[c]=_.Dq[b],delete _.Dq[b],_.Eq--);if(d)if(a=d[c])b=_.df(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.wu(_.Rfa,qA);._.l();._.k("SNUn3");._.hKa=new _.uf(_.zg);._.l();._.k("RMhBfe");.var jKa=function(a){var b=_.Cq(a);return b?new _.vi(function(c,d){var e=function(){b=_.Cq(a);var f=_.Yfa(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	dropped
Size (bytes):	4069
Entropy (8bit):	5.38158802454535
Encrypted:	false
SSDEEP:	96:GSqd6IKpLc2LWvAI3HvtVqEUy4kzsQ5IWdw:6oIKPLWvZHvt7Uy4S4f
MD5:	EB9A9E3F39936D89B32CA64B4DFD06CD
SHA1:	E0BD0427B5BEE95F2374EF1C4A1414396BBA8F97
SHA-256:	0B71496EAE4BBF8E8B13F4E22A4482BEFE6C19AC4D1B24ADC90F33DEE203E945
SHA-512:	B1F2EFCA5D7256C92010E208BE0E1E0D74F379649800DD934D48E9C02F0295A9C117284070205E55421A33FC79241D11FBA0C917CBA59DF0B9A14EC189F395D8
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.yg(_.lqa);._.k("sOXFj");.var Cu=function(a){_.W.call(this,a.Fa)};_.K(Cu,_.W);Cu.Ba=_.W.Ba;Cu.prototype.aa=function(a){return a()};_.wu(_.kqa,Cu);._.l();._.k("oGtAuc");._.Gya=new _.uf(_.lqa);._.l();._.k("q0xTif");.var Aza=function(a){var b=function(d){_.ho(d)&&(_.ho(d).Jc=null,_.Mu(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Yu=function(a){_.ut.call(this,a.Fa);this.Qa=this.dom=null;if(this.Bl()){var b=_.Km(this.Wg(),[_.Wm,_.Vm]);b=_.xi([b[_.Wm],b[_.Vm]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.ru(this,b)}this.Ra=a.Cm.Uea};_.K(Yu,_.ut);Yu.Ba=function(){return{Cm:{Uea:function(a){return _.Ye(a)}}}};Yu.prototype.Ip=function(a){return this.Ra.Ip(a)};.Yu.prototype.getData=function(a){return this.Ra.getData(a)};Yu.prototype.Co=function(){_.Ut(this.d

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	dropped
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	downloaded
Size (bytes):	6662978
Entropy (8bit):	7.958019049174792
Encrypted:	false
SSDEEP:	98304:vOtzAWupkd4f3qiFd74STXkQAW0ZwRy8gNxhFRfhdOReIgDgvVTiafAOZFMrj:GpA7ydWqyrp0uy8gLRqe1yi+ZFUj
MD5:	7F23B1A0498132624D50ADB2C7902239
SHA1:	0F7EB735C6EC74F004D9208531C281D49CB1FE9F
SHA-256:	93BC9E63A8F2725DCD5FA43414530EF566C878901618644621B948D0F7599460
SHA-512:	3CD26043223EAB955251CCA8032C7EAAAB9D68823C858D8C3EA35BAEC093FCFB29AE3DA2CC3A0E0F698D0E203AC47ED79C75DFA8BB47B77D51BE014203D00810
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/ykTW8EtjZIuwFj1YAJqxyuVX4OddosBiSDoo
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8................................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	downloaded
Size (bytes):	3019964
Entropy (8bit):	7.960852973877143
Encrypted:	false
SSDEEP:	49152:RA5LG758mqDsNR4rmlFIBg/4vuaVB8v42psIu+djH03PYTjapvB8TdHI8tCl2GxE:CtG75DmdrmlFIS/2zrMsqH0fYTepeelI
MD5:	530E1468CB2FDBB27DB213E81FC43EAE
SHA1:	E2E94CB2AFE2AF4237A70B610A33260DF36E7814
SHA-256:	7A1BD9B4E306B69DF41292FCF1408EBBC9F7A505FECF5543D53A6124B072992B
SHA-512:	549F80CA50F89B0009DDE0C847FB6F47D1E27D157E646D0A7139F997FE0AC13695648CDEA6EE10EA772C999A2DB3051834270EB1DC728D807952252564001FEB
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/LslJj1iFGATghl9ipuvfc2FuZlbaWAWtX7vz
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8..........................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.Mt.F..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	570
Entropy (8bit):	7.507500083049312
Encrypted:	false
SSDEEP:	12:6v/7usW8F8q0XW32k3hFGIqpOpsFQRJWutLUe7XAO/b1SKT1:Bq0XW3H35p3R8utAeTAOZSy1
MD5:	0E7D27F6C5C957880E631FC98144B897
SHA1:	BEA8DFB7CF588CAF5B2C98A3744F9B367EEBF65B
SHA-256:	B2C36462B54E7D9344E9E6A18B6EA2CCAC84A684BA73CABB638B0C756017E919
SHA-512:	BFC17A0405C5509FE894C6A322782821B157E0570BD08CFB809BC5FC8358CFF099DE3B0EBC3C961E48C9B456DDB46EC30E6997D40702C1AEA4ECFBFDA5EA4912
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8...MH.Q...o7V....K.!..a...u.:.I..z."h..^...].>. E...9."..6....,...Z....{..7..7.-........~.....B.^....n.w3.L}....@.c..F.qG.........j.......9..5.L. .t:.G..P...p.W.aX.P<..z..!.[..F...Q..]6....f.........B(..Z....z....f.z*.J...:A..........}R,.e1Y....j.9...l6/q..d2.,...<.O.....p.Y..y^.....o-.....c......Z..t:}'....px..-...3$.@.w-A.a1..x%..\2.C..Y[?.......F..dP...E>b.....D..-....n...o...#...m .. .y........S...$.H$.2..M.i../..........x'.(]M.....<...B..\|.V...5.e.r......`.Z...\\|..V.Q..89....IEND.B`.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	32503
Entropy (8bit):	5.37855177416442
Encrypted:	false
SSDEEP:	768:mDhJ1UQSeQl9Hx+esIvw9f7y4hRloZDAMwXbesyNFD/p5j2jDxgw8L:6IJsIZoRloZDGbgFk1AL
MD5:	33911E34DA0A8BC64B0E26E58F3CBCDD
SHA1:	F2707EF382382D1D0FE1B0443FB111416D43A7EC
SHA-256:	1A223ED2252ED2B0461A31FDB09943861FE40AA47D3B8D337C841AB87CE4F0F5
SHA-512:	AEFC12082D2648A4854056167B78C4717C6917995C7F0936E3E8A7E5B35284363BFAE28B5AF2452698B1B69973A522918B308350CEAD7F5BE19595CBF8D0CC0D
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Gua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.op("//www.google.com/images/cleardot.gif");_.zp(c)}this.ka=c};_.h=Gua.prototype;_.h.Yc=null;_.h.FZ=1E4;_.h.rA=!1;_.h.vQ=0;_.h.MJ=null;_.h.oV=null;_.h.setTimeout=function(a){this.FZ=a};_.h.start=function(){if(this.rA)throw Error("dc");this.rA=!0;this.vQ=0;Hua(this)};_.h.stop=function(){Iua(this);this.rA=!1};.var Hua=function(a){a.vQ++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.wm((0,_.eg)(a.hH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.eg)(a.bka,a),a.aa.onerror=(0,_.eg)(a.aka,a),a.aa.onabort=(0,_.eg)(a.Zja,a),a.MJ=_.wm(a.cka,a.FZ,a),a.aa.src=String(a.ka))};_.h=Gua.prototype;_.h.bka=function(){this.hH(!0)};_.h.aka=function(){this.hH(!1)};_.h.Zja=function(){this.hH(!1)};_.h.cka=function(){this.hH(!1)};._.h.hH=function(a){Iua(this);a?(this.rA=!1,this.da.call(this.ea,!0)):this.vQ<=0?Hua(this):(this.rA=!1,

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9768, version 1.0
Category:	downloaded
Size (bytes):	9768
Entropy (8bit):	7.975118282088062
Encrypted:	false
SSDEEP:	192:Wiy1McDcSTowj8gYHJHNr/LQ9BHkV1lnJAN7+hzY+XmRVPBWzFBZ0x0Zbs:CMcDowj8guHNr09FkV1lJBs+yVPBmscw
MD5:	49831701CBADCC981121971FD0DB8673
SHA1:	A74A7BE2195AA44D304F82681CE9BD7ED5FE12B4
SHA-256:	F5A2670F86A2248805A64CB46CD1F59BF05E9A8201B81C09F579F94820404354
SHA-512:	67D4DC6672C16D085E7CE81FC0D64581B4C5A1578F2F4866FADD8F4DF7F391A9CB741FDA8892BCFD3F2FAF116606EC2C22998F2C1D2E650A89619C1584CDAB52
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2
Preview:	wOF2......&(......_...%...........................H.....r.`..r....(.......6.$..\|. .....E....S%.X......;..... ..K...Q......5...._....D.lO...:.............xj.P.=.b.p..._.K..\|....P.)..R.Y..$.d...z.q.....?........$.....\|k.......3Ih..p....{w.1j...Glt...``.v.m.6)....+.\|.fx.V..b...P..fQPP.AJ.!..,l...+0V7....8.....4)g.t).S......d.ZO0.z...s.... y/.4.4..#H4...=ERu;.n...jm.0eE/......h..&...R^i2.z...O./.....n.^..f..b.X\|.X(/..wg..7.pM.";.{.X.......Y......1.Bbq......K6>#...~............A4..EC1k.h>k....A..XDB....$.6....[..?.q2.^...R.....6.5[....e..[..^6........r....hz..'.....2....X+.?....@..H.* j.h..M_.hR.(..\|y!.<.O..(fj......B....\U.6'..S......w.&J......$...$?...Z.r...........N.....@..`.1!..$A.."...8T 5.........@F. ....[..$ .\.C.\|!.AP.((...7..k>...h.e.........@..v...s.J......A...R..1'.SDP.*.F....tI;...0...k.O. }....@c.2.4.U.\|V......."G.{..\|...q..kA.. .F..@n.<.../..._.<......Px..M..$0..TB.u%....M...Z5\.`....Q..r,@.6.;&(.`\|.'...W..o:.P\\.V....(..w.j\|vjb)...(..^.px..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15988, version 1.0
Category:	downloaded
Size (bytes):	15988
Entropy (8bit):	7.985554788162145
Encrypted:	false
SSDEEP:	384:JfFDqxG/bHq3qmBgWpwqOu9ulbiyuY+ifPqlBOpMEyNKF:1FuI/3mBgWpwLlmsaBOSuF
MD5:	CB4F5F85FAE1369135CB93997B0C7507
SHA1:	2FD7A68C2A0291BD74B6A6C6E229B60876B1C1F8
SHA-256:	06E60764F2F683EF1562780A928735CA90BD7FF7B7376D2818C8445BE9C29669
SHA-512:	9275475936E2840008A6D2FF86C1080D484178E964EB3C06D5A12D70F79F5E8E09C97126C139C86BE95EC15C9971142F2455E002C0B336344D3060C16D3B9B04
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2
Preview:	wOF2......>t..........>...........................<.....:.`..:.....(........6.$..(. ..&..N...X...!.q.........h.?=.H..q............uT7]/.....(K.ZRfl.d..=)....)..P..[...>J../.....z .tud;...w....Z8....k#.........uW.Y.8..C.d.N...\..-\|.zy........`..j.a...QjF&....?.w.\B.H..B8.B.!...B..:5.T..bR1P3j.X..i......(ox~.=c.7...1@".......A1Q,.\.N.yw.].....zW...}:.g$...MA..[{9S..\|@... .?...?..Kh=.{.#..;.P.........8.}..[K%.x@#....7..PBv.(...p....C.....~.........Dp......k.6.8 ~...\|..9FF..0.c.cG.qy... ...RK.R.....H.M6.6)/. .EX...9fIr..V...........}....y.....X.h.....=r.L.5..../.1X#".X,.D&...,%H.?.......mjs..$RXA>...a.\.\S<.....5)..."..J!.:.uh.(..cVX.:D,......!(.....w.^...Xp..=..ze.S+...y$....`.y../...j#.g..5.#r$"V..k...j.....E$..O.L..!.F....7..7.X/U.e...v.16.......R....G.J...pP..;.........Q....=.i.?GG&....B......+....E.....c.W.[.X,H($.J./..........L..@..c....(:.:...K...?..B...# .... ...^...q._FA.O..P.\|n-...XVT..}.8M...QD......#..s..b...@.L!..? -C..04 ..SK..O$...n.;.*....'

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	7.642704506233666
Encrypted:	false
SSDEEP:	24:VYCc25934kGef0S/yvIaL/8Q4HBy9vdek:VHcOePQ0dL/EyYk
MD5:	089AD8854F62CA8726D4129B81310E8F
SHA1:	ABF76DF8618639A4AB1EE2B3D12BAA01BDF507B0
SHA-256:	CC23E907B15D21B0C59B7F18D5444C2A777F58871306896533D7FC6283FC96AA
SHA-512:	E1F40A3908CF56379B0276D7F56CD3430548ED643A61FF9C8B27A866C5436CAD4AA6FE4F5012B591C61F3C8893D34905FDEDAB40A1A45AA58E697061E1EAD2F2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH....N.Q......A.4..G......<.DHdM.1>....@`-..E..'`!"...h$...tjg...t...0..z....;g.=...5.^P.z.$p!..G2.y......t....,2G.!.D.-gs.~+.`R6.!aV.@./...~..0.Wx......ra.....xqG.@V..-u..z.O<....g..J-....\|g......mT%.F..._..1..Q........z%..`R..0W...@....J?....g.l.6.q.`@.9.f.C....j....k.P:B..9...+Py.Es..m.h<."...F.3.[m...9..a..B.M".I..8l %.J/Dmc.B.~).P...f#vA.q...R...0k..U....`..00d..[...X.A....../Pd..P.8...wB....K..A!.C...M..[...$T.........P..=....w.}E..-....K.b...%...2e....".e..U.Q.Q...[T.)..s...cra__.....VG.;Q..[.F.q......p.p.8..6.>=.._1....?....h...u4.......;.6Zmp .W./F..+..-b......:..b.#...O..+P.b..c..../...-.%....61..o.$i..Y..X..Mc.:.b....[...mw...2@...9p....c...g.`....d.W..<.......".......IEND.B`.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	417
Entropy (8bit):	7.213698570031854
Encrypted:	false
SSDEEP:	12:6v/7usW8hMnnq4niGcmldHBjUKjFbbpJ9T:Bnq4iGcmld6KjFbblT
MD5:	B10A39FE49F066A8ACD7CB3689650023
SHA1:	FEC475C49C727F578D5311F3678402BF12475CCE
SHA-256:	EA4165BC5CEC4C11DEE6C59FAAEAB7097262B86FEF233BBB125AB04AE4E7AB29
SHA-512:	86E7CE45A49FEC2B32C3A85FCB6F26FE58A44C06AF5A8D63ECA4F8D18906474A308B66A8506EF35EFCEF97B1E13DE9DA7496094C88CAB3710E252F7733A7AF28
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/rSBxg2WVSfcGERMQBmNbpwGIVhUp6tWUsNyM
Preview:	.PNG........IHDR.............V.W....sRGB........[IDAT8O..=N.@...E.....8..6.n......$.A.B.4HI8A...q..)..H4H....Hv..[.\|z.hf...dIN..y5.F. . 7.P..(z.B..!0..y..........Iae@.$..JI.....H>..*.......#".S..<87l...,.....Rp..O.......Q.;.b..8..W..P.L...........).(QV.FA-.....g..&If. 7QF.5IR....N.....I.A\...:y._..&.QJ......C.P'.......]d....!h/.)..W.... ....R{...m.....\!q.X._..y.w..O._..\.o...v.#M....IEND.B`.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	172721
Entropy (8bit):	5.557490102329871
Encrypted:	false
SSDEEP:	3072:eqnkFl6sSNx5jZXhiRU3BaPwoqKBfRHvcuzNvOa3Qsh7P8wOxgdYQ0CkrOqKs9G5:eqn2l6sSNx5jZXhIU3BaPwoqKBfRHvcK
MD5:	2243840E62376D41E9808357D3214D67
SHA1:	D21E0BD29337BF1A34900D0216B961824DE87E48
SHA-256:	482BC6E3D5DBB7C5764B3CC6D1B951E90B904E57BE314990A7D89B6FDDC580BF
SHA-512:	6C590D71FD4C7FD51071F93DC548B4964C0D4EE1FE6781EBBCDA9FE4127FF631F4AEA00DC69B926EFE40522FFF23C499387B4BB11487F0596DF150CE675D9FB6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.6T6r_9V_Ciw.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTuWzR02q-lADuEe1tzdVix-MATZjg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.636521244861347
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljjhiMMS8R/m5DsotL/uvlrq22g1p:6v/lhPZdwRe5DsG/uvl+Wp
MD5:	37DD4A0C4EBDDD1F95D8B09A356068A0
SHA1:	F559CD13D8AA2DDB63689C98FEC6044B1C356E41
SHA-256:	2EE94D2E255F58C5684196BE872CDBF2AB0B3C88A3BD5D6ACB7574992803A13D
SHA-512:	AE8A24C446048CB742C2D9A149BD7CBA4FFA065A3ADDB059559395AEA26B3478ACF70DA85AC782A79B40BD50A2665B9A86E1D20CA0963888F4295EA017BBA19F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=....CIDATx.c........dAii.\|Z...4.?.......d[2j.M-.....>jxEE........p..Q0..j.\.jOL.....IEND.B`.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	210658
Entropy (8bit):	5.537479598675032
Encrypted:	false
SSDEEP:	3072:L4KAkKLX3WPB5eU+dH0ZK7PZ+tDCareTpD5372CnXWhl:cKG3+DG2RkpD5372CnXWb
MD5:	B4E8115872506B447409044BBC986D96
SHA1:	9504BFEEB6CACC30A0DB23EE76B54ECE5573201F
SHA-256:	ABF708F511E05373804195B1AEC9D99FC37840FB1CC676B2D16AEA76503D029D
SHA-512:	7708EF8B3E598DDCB257F8EB7DF0D219580477FFE573E15F72E644853A749E71C75C35704864F3C6C0E375EA06982F072CAB329D0C84FFF0D0824CF2CEEB6299
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/related_item_external_avatar.png
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5132, version 1.0
Category:	downloaded
Size (bytes):	5132
Entropy (8bit):	7.959814059351413
Encrypted:	false
SSDEEP:	96:HZkx6Qo+1cdqdwbpAO1sLJQOJyuUtGhrAzzLfptGiz:5kUQhckwlKLPk9t1zLfCiz
MD5:	7C438C68BED5CD5FBC47B724BF853634
SHA1:	4AEA344FD136A23926156212AE2AA156672BE4EA
SHA-256:	B7B835E506F41E07EE76C30AA7B140EE3B80C7D4F083282CD849C0AD19F705A5
SHA-512:	844D79F159661161F959A19F7B8E79642E958415BF6AD710CD405E4A5E60499F4D2A3DE58BCFB2CB2E657E8578C48EED8184E01B7620609790AE700C2ED0B30E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2
Preview:	wOF2..............-d.................................4..B.`..j......J..f..6.$..H. .....V...8'EFm7i.p......2.6f.h-.2..S.Q.Rl..;F.B....JDo..{J.OnK..CI.........Gh.\....?wr..!"[b...T.,_....o...ad..q.#...L.1..AAd`.....V.7]....Jw/..Hw...`.~.Kk.mm!.m.%.B.J.>}.....<.l.++...N.............!FQ...!..9..Z..{{....I....r..z..m......=.9 ..NF...!X.y L.....Z%:d#.B..........UQOEE.D.c.}..S.,.@.........@....HQ.X.DI..dH.TH.tH.,......R.."#.T....(( ........ ..H...9.S..^s.5D.8n....P....Ko.....8xHX.....#....0~.m.D@qB.@1...1.. ...r.m..H. .eU..'.s4...)..(<.@.L."....-.e.......MB..A.\|...K...-.br.]5../{.#8..+....k......W(......x.....j.V3q.....g.oc...(.1...q....9....6DoX...c..R...tap.D.......ab....-.3.8.a.#...[2....$lS./W.,..x.3.1....,...[.DAIW!M...}.cG....J.....r.....J...,2. (.Xl[.u.6g..f..p .q..Mu..P.....)g@].^.6..f^........9.J4.Xva.^..0...0=8...8..=...P.t.S..-)..c.rP..0... %7.tg.b..g.......K.C..]!S.`.Q.....V(V.+..m.>...'...Uq".]....N..C/.~..!.....&......^(..v. .W.v/o..!..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54331)
Category:	downloaded
Size (bytes):	1195173
Entropy (8bit):	5.708355478699217
Encrypted:	false
SSDEEP:	24576:cNbQIiXqIDTUuiZEggk1yFSydCkzmfbo2H8L/ti0ocL3aCnrXtOzr04zhAWsSe:cNbQIiXqIDTUui/ByFSydCkzmfXmXczq
MD5:	6092B364CFB2569AA5507D2BE99967FE
SHA1:	68612494B4520774C8AD87135208E62020C80A98
SHA-256:	8CA23A0CF1010441D3CBDE7D066DC63E9FDB840FFD25B96DF372D0F791E6F83F
SHA-512:	860AD0EF51659DE26575AEAECB20433B88BC57319AF667E3A049BB7342EE1736A3873D99F6BE3423E71A59984C9E8E522F1D31948AC0BE8F0E703F94AAAE5D83
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Set your homepage and startup page - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="You can customize Google Chrome to open any page for the homepage or startup page. These two pages aren.t the same unless you set them to be. Your startup page is the one that shows when you first" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/95314?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	746088
Entropy (8bit):	5.792087136477159
Encrypted:	false
SSDEEP:	6144:RHQ91RRdao8gjqXWTY/966mmY6Ed8UCMb:R0yM/CMb
MD5:	E04548BBF8093E441914F95AD6030310
SHA1:	6AADAE2EEF689AA2CBF4112E36CAE2B1B882EF2D
SHA-256:	04355672E609CFB0B35AC29999AFFDA3072361528AC32AEAF4CD8032D4648A48
SHA-512:	D60AA1F724CFD75890F05690EB138F839E349D8D83DB8A30C03C0985CF226945CB9C14C2FCF26D4277408EA31EBCC14389F8D933071F85542801FF74280D4E53
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlG77ngEizQ-kbuwBTlfVmNwuvRgPA/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1460c1e4, 0x10234c32, 0x39e1fc40, 0x24501e80, 0x1c840, 0x0, 0x30000040, 0x3a000006, 0x31, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Na,Ta,gaa,iaa,jb,qaa,waa,Caa,Kaa,Maa,Paa,Jb,Qaa,Ob,Qb,Rb,Raa,Saa,Sb,Taa,Uaa,Vaa,Yb,$aa,bba,ec,hc,ic,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Qba,Rba,Sba,Tba,Pba,Uba,Wba,dd,Yba,Zba,aca,cca,bca,eca,fca,gca,hca,jca,ica,lca,mca,nca,oc

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	417
Entropy (8bit):	7.213698570031854
Encrypted:	false
SSDEEP:	12:6v/7usW8hMnnq4niGcmldHBjUKjFbbpJ9T:Bnq4iGcmld6KjFbblT
MD5:	B10A39FE49F066A8ACD7CB3689650023
SHA1:	FEC475C49C727F578D5311F3678402BF12475CCE
SHA-256:	EA4165BC5CEC4C11DEE6C59FAAEAB7097262B86FEF233BBB125AB04AE4E7AB29
SHA-512:	86E7CE45A49FEC2B32C3A85FCB6F26FE58A44C06AF5A8D63ECA4F8D18906474A308B66A8506EF35EFCEF97B1E13DE9DA7496094C88CAB3710E252F7733A7AF28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V.W....sRGB........[IDAT8O..=N.@...E.....8..6.n......$.A.B.4HI8A...q..)..H4H....Hv..[.\|z.hf...dIN..y5.F. . 7.P..(z.B..!0..y..........Iae@.$..JI.....H>..*.......#".S..<87l...,.....Rp..O.......Q.;.b..8..W..P.L...........).(QV.FA-.....g..&If. 7QF.5IR....N.....I.A\...:y._..&.QJ......C.P'.......]d....!h/.)..W.... ....R{...m.....\!q.X._..y.w..O._..\.o...v.#M....IEND.B`.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	downloaded
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.401590455839737
Encrypted:	false
SSDEEP:	192:trxq9x5WdZrZJgKQ51Cqs7mPRqezOqFjZ9Jw43y/WdMLli3ALVorOgYx:trY9/Wd1tq8mPIezXnJx3oWdMLlNLVoA
MD5:	9E63C5CFA6AAC52670130FF40264DF57
SHA1:	757AFEA21BCD4831D7D4A3E7ED10E8052CEC6AAA
SHA-256:	9B366409C3F7621BB55118B684FD14235D807921B1D63D905D4D9F56739FA372
SHA-512:	586C6A196CD7E8114E683F91D4445CE0E101EC63BAE024D21F62C5D9218D7654AC777C8549FA448DBCF6EBB21CEA58D3806D8A1B4EFEF839132A44AD5A578996
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.ENa=_.z("SD8Jgb",[]);._.EX=function(a,b){if(typeof b==="string")a.Kc(b);else if(b instanceof _.Qp&&b.ia&&b.ia===_.C)b=_.Za(b.Qu()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.FX=function(a){var b=_.To(a,"[jsslot]");if(b.size()>0)return b;b=new _.Ro([_.Yk("span")]);_.Uo(b,"jsslot","");a.empty().append(b);return b};_.NMb=function(a){return a===null\|\|typeof a==="string"&&_.Qi(a)};._.k("SD8Jgb");._.KX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.kd=a.controllers.kd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.ta().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.KX,_.Y);_.KX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.vv},header:{jsname:"tJHJj",ctor:_.vv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.401590455839737
Encrypted:	false
SSDEEP:	192:trxq9x5WdZrZJgKQ51Cqs7mPRqezOqFjZ9Jw43y/WdMLli3ALVorOgYx:trY9/Wd1tq8mPIezXnJx3oWdMLlNLVoA
MD5:	9E63C5CFA6AAC52670130FF40264DF57
SHA1:	757AFEA21BCD4831D7D4A3E7ED10E8052CEC6AAA
SHA-256:	9B366409C3F7621BB55118B684FD14235D807921B1D63D905D4D9F56739FA372
SHA-512:	586C6A196CD7E8114E683F91D4445CE0E101EC63BAE024D21F62C5D9218D7654AC777C8549FA448DBCF6EBB21CEA58D3806D8A1B4EFEF839132A44AD5A578996
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.ENa=_.z("SD8Jgb",[]);._.EX=function(a,b){if(typeof b==="string")a.Kc(b);else if(b instanceof _.Qp&&b.ia&&b.ia===_.C)b=_.Za(b.Qu()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.FX=function(a){var b=_.To(a,"[jsslot]");if(b.size()>0)return b;b=new _.Ro([_.Yk("span")]);_.Uo(b,"jsslot","");a.empty().append(b);return b};_.NMb=function(a){return a===null\|\|typeof a==="string"&&_.Qi(a)};._.k("SD8Jgb");._.KX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.kd=a.controllers.kd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.ta().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.KX,_.Y);_.KX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.vv},header:{jsname:"tJHJj",ctor:_.vv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1495
Entropy (8bit):	7.805540701547832
Encrypted:	false
SSDEEP:	24:eSsgtr0PJdUBfYQu2zJqpGxNhYWmkcnJ/SJKk6fpEBVtjS:mPTUSpYJ2GfZ+9rZBItS
MD5:	77EED678795C902617CF40F681DD3DE5
SHA1:	3F82E4EA45C4351C0C1CAA583FBD79405F54FA29
SHA-256:	9D0BEE65FF59D8CDECA5DF9E472112B5C12BB9A6509FDD4CFEC5F637A23AB167
SHA-512:	87E1489734B42295781C94D2661CAF00026CDD02DC927797A888124333866FB2FF8F06C4F3FB17CBADC19E62E23EFA113377CD10A1125658441C0B762620B874
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/EhnJKCYnCpUVMQvn9LxVpGRY4fJAjUYOfZGt
Preview:	.PNG........IHDR...$...$.............pHYs...%...%.IR$.....sRGB.........gAMA......a....lIDATx..X_L.E.....3..5m)W."....BMA.^4..M..x....<..............M.M..&.T9ci}@8RmH.k.&..As@..q........rV._2..ov~..7.ov.{..9..mw..n.U........Q...j_..r........-......\|N...C.f.Y".mow.....F...1[6...G;..aq.B.pCCguM..&..d..C...b....r.J.!.X....L[....Qp......Ls4.........B....K.uW'.M..8u.....ws..~Sj..Z.z..[.h..T=R....R....W......&....(+.j.s:....).h....m.LYi.....j.....x..N".r.....I..i..f..z. .....)9(M.Z.c....mEN..R.E...\...PH....:..?:f.z.YiR..\|t..j..._.D...<C.........O}...{w$..1D,.Z...>..O. s.&h9...n...0.....F0<.......6.I..V.if.HE1H.............0...d.ML.Vfq.q8.f......`C.pna.3w...S"...c..!2.k......%9e...m3*.p....Q..Wy..s.i(\.A.(.X..`....ip..a..v.{..)...9..d!....(....z?...o...M^.....Y..............dP........E.(!(...s..k0.....h...VV...e..A..8...]:.B...$!.m)............NkOm.. ....)..q.QBL... .~....}.....m%.P.n.E......\eQ..V......Ul.......Q..d.F".+-....

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54423)
Category:	downloaded
Size (bytes):	1190056
Entropy (8bit):	5.707096183762429
Encrypted:	false
SSDEEP:	24576:xKVQIi0qIDTUuhgEggk1yFSydCkzmfNeIH3oNqgi0ocL3aCnrXovRF04zheWGSy:xKVQIi0qIDTUuhCByFSydCkzmf9mXuRA
MD5:	C5CDDB6A1CF2BE0E45741238BF2CEAC6
SHA1:	C70FBD3BBA9BCCD927604F27F82AA0EA328F0D51
SHA-256:	C6F20953588288953612F64482D67F78FDA6008F217B893EF0A019913EEDD144
SHA-512:	CB178259233D77BA5F4162EB82E853C8467EF0EE4C1124D0456E18A648A4E60B9B89F605423313218A4EA69FE9740AB76248E814DB74FF559C245621C25EF5E8
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/95464
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse in Incognito mode - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="You can browse the web more privately in Incognito mode. On your computer, open Chrome. At the top right, click More" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/95464?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	dropped
Size (bytes):	23298
Entropy (8bit):	5.4191224553622295
Encrypted:	false
SSDEEP:	384:yD1lVh+Jbv21XYx0LqOnZ8CcG6g88mzdMDr8C/NbpQc9wI:yD1lVh+z8q26CjUzort/NbGAwI
MD5:	3E81E9F957CE433AF27702329B059853
SHA1:	D442F984DFA8415FC892343775175D201229587B
SHA-256:	24AAA7CC46085EC12DB355AB7482B3C6F355F3250900D0EE9C5A70A6969B1E93
SHA-512:	B6938721EB785228C73BC011D8985FE8644499F12EF24D361B8C7E0E7E7946C526021F726E4192300E997C892B9DDD5C1B5559469407A1940B6CFA8F89783016
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Du.prototype.da=_.ca(40,function(){return _.Cj(this,3)});_.iz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b};_.iz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.jz=function(){this.ka=!0;var a=_.Gj(_.pk(_.Fe("TSDtV",window),_.Hya),_.Du,1,_.zj())[0];if(a){var b={};for(var c=_.n(_.Gj(a,_.Iya,2,_.zj())),d=c.next();!d.done;d=c.next()){d=d.value;var e=_.Sj(d,1).toString();switch(_.Ej(d,_.Eu)){case 3:b[e]=_.Qj(d,_.uj(d,_.Eu,3));break;case 2:b[e]=_.Sj(d,_.uj(d,_.Eu,2));break;case 4:b[e]=_.Tj(d,_.uj(d,_.Eu,4));break;case 5:b[e]=_.Uj(d,_.uj(d,_.Eu,5));break;case 6:b[e]=_.Yj(d,_.kf,6,_.Eu);break;default:throw Error("kd`"+_.Ej(d,_.Eu));}}}else b={};this.ea=b;this.token=.a?a.da():null};_.jz.prototype.aa=function(a){if(!this.ka\|\|a.key in this.ea)a=a.ctor(this.ea[a.key]);else if(_.Fe("nQyAE",window)){var b=_.Kya(a.flagName);if(b===null)a=a.de

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.56865329157797
Encrypted:	false
SSDEEP:	12:6v/7WYs1eiaCWtFZNDfdWpGK9/N0eYkbIkZlcVwNkc:N7ei+PR1WAMN0eYWInVZc
MD5:	80F03F4B309056CDA71A7E6469BCCEE6
SHA1:	0108A567FF39D0B9E273F336C1D8AC7AE5F700B2
SHA-256:	1D80F0E2A49BA079AE22007AEB759A5903D45DDF1BC5A707BF129BE328F3CC5A
SHA-512:	111C8A794367FC6283EC3C64A4B1E9DE5D70E9324AEC0E461B4407BCF9F563F0A4FCED4FDFA2826D9299B8851B08B44AD244E53FC36AF4D304815348FAC93E04
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH..Mk.Q.......:-&Y.n...ih..P.U.&...,.B.F...<....(...n.qeu...R.tk...j7......V....L.I].=..{.9...8..j.-,.$.leF...0qf.T7H....^3.M,.......PfP.......2.8VG..p.Y3HN..L..Q..dR....#.C.kw.G....W#H..3b.z$Z..8...v....[x'[..g...Y.7.:......#+0..ge30F....;h`.'..L...v..\.h.2..e.S.^.qN.}Z.Q....5..W.e`... .E...^OKs.O.."...).F.#..29... B.~.Y.......gD..@oxEv...$.....>.%..=....k.ajl.....&J.....-Q..F.->...T;u'.@6...v.0.r...>."..L.O.......m.....^...~..iW.c..w.$!.<`;]....9B.y..@.=<%.kkp..4El.43....\W.I.o..-].)6G9C+.pRg.+W..._.d.y..W.....IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1495
Entropy (8bit):	7.805540701547832
Encrypted:	false
SSDEEP:	24:eSsgtr0PJdUBfYQu2zJqpGxNhYWmkcnJ/SJKk6fpEBVtjS:mPTUSpYJ2GfZ+9rZBItS
MD5:	77EED678795C902617CF40F681DD3DE5
SHA1:	3F82E4EA45C4351C0C1CAA583FBD79405F54FA29
SHA-256:	9D0BEE65FF59D8CDECA5DF9E472112B5C12BB9A6509FDD4CFEC5F637A23AB167
SHA-512:	87E1489734B42295781C94D2661CAF00026CDD02DC927797A888124333866FB2FF8F06C4F3FB17CBADC19E62E23EFA113377CD10A1125658441C0B762620B874
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs...%...%.IR$.....sRGB.........gAMA......a....lIDATx..X_L.E.....3..5m)W."....BMA.^4..M..x....<..............M.M..&.T9ci}@8RmH.k.&..As@..q........rV._2..ov~..7.ov.{..9..mw..n.U........Q...j_..r........-......\|N...C.f.Y".mow.....F...1[6...G;..aq.B.pCCguM..&..d..C...b....r.J.!.X....L[....Qp......Ls4.........B....K.uW'.M..8u.....ws..~Sj..Z.z..[.h..T=R....R....W......&....(+.j.s:....).h....m.LYi.....j.....x..N".r.....I..i..f..z. .....)9(M.Z.c....mEN..R.E...\...PH....:..?:f.z.YiR..\|t..j..._.D...<C.........O}...{w$..1D,.Z...>..O. s.&h9...n...0.....F0<.......6.I..V.if.HE1H.............0...d.ML.Vfq.q8.f......`C.pna.3w...S"...c..!2.k......%9e...m3*.p....Q..Wy..s.i(\.A.(.X..`....ip..a..v.{..)...9..d!....(....z?...o...M^.....Y..............dP........E.(!(...s..k0.....h...VV...e..A..8...]:.B...$!.m)............NkOm.. ....)..q.QBL... .~....}.....m%.P.n.E......\eQ..V......Ul.......Q..d.F".+-....

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	5.336991931003171
Encrypted:	false
SSDEEP:	3:yionv//thPlT/XtNsyxdxFxk+baSkpkl/2up:6v/lhPXNB9FxkkJeup
MD5:	114E0F27AB7C461224303644FA3EB89D
SHA1:	5504053F373E6496680125CB2D4A8A9F437968B8
SHA-256:	E3CA966E54B53DD010FF2DC0023813647AC9DA72774192E2937BF906AD1139E3
SHA-512:	A3A186FD9BFCE07D3B5979DC8AAF4917595993F7D3B52DFF7355CBCFC26AAFEA3FDE958BD186D5D0ECB18595F68F398B64E21F291A1C052573521768957209AD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36
Preview:	.PNG........IHDR.............J~.s...(IDATx.c.....9.......?.>.......FCi4..)..?.:....<....IEND.B`.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.664959056860514
Encrypted:	false
SSDEEP:	3:HniCnmzth+2K2mCGUpYk1G94kn:BmB3tYP
MD5:	A83BBFA2EE366E0DDD852BF6285A337E
SHA1:	98039160B0267199D10E4FE77546283DD2417187
SHA-256:	FF80EB8EC06E1ED5A6D0A0592CF148409DEC1594F9C6AAF0C4B8AEAEB0C86147
SHA-512:	79666D1140B8C1F0C46B834BE3BD937CAEFAC82E14FE380068F6769770414EC576AA2106A4B32CF329698C30164DCAA9D5378A1DF1300D3E5C9CEA7F7D3115F1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoSCgcNlJCS+hoACgcNaUhHRxoA

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	downloaded
Size (bytes):	122913
Entropy (8bit):	5.472136552318629
Encrypted:	false
SSDEEP:	1536:KAIcfKjLgtJUzb6xngNEw3qNmSMq601sibL/GDj50frNNyhAnY/rBl6zap+uLU2Q:PIyKbXf4M6J/GDlkap+uhK8C
MD5:	0E46F1208A65DEA2631A3BAD0A09E1FE
SHA1:	F286F70876DB7F668727057AEE401EDBA5269B7D
SHA-256:	94BF15959C201BE7CE4EE345AE3CCE61DE0F85426CFAB1FF596148C834D1C747
SHA-512:	F755466BED39220668C6E7BCE86B52870EBEF536A002654497695DBEA1492287BB42FBF02B5164ED727277063E7D3E70C07BD1936845870F96537DFB34E58011
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	1970
Entropy (8bit):	5.2966551470963585
Encrypted:	false
SSDEEP:	48:o7ywaGR3cL3A4FUA6E4gsusR7dO/Ufaw/3K/roo8osTCErw:oDMLHFwzDU/mm0HfCAw
MD5:	A4B059C3E9299DF351F8DCB87B451950
SHA1:	719E58AE96078AD8D0EB9BD74F346894C10363FF
SHA-256:	C4158E03E5693AC0059A7C7925133A99440076FE225DECA31D9DEA1EAE84C7DC
SHA-512:	320885EFBFA877AA96207CE385BD3FB49B04F8B9AAFF65A853F3C5CC1ED83C4720749BE761A8F93D2238AA7F3D3DC9E28BB25ED6E67E64108072C226E762012E
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.LZ=function(a){_.W.call(this,a.Fa);this.window=a.Ea.window.get();this.Oc=a.Ea.Oc};_.K(_.LZ,_.W);_.LZ.Ba=function(){return{Ea:{window:_.zu,Oc:_.LE}}};_.LZ.prototype.Yo=function(){};_.LZ.prototype.addEncryptionRecoveryMethod=function(){};_.MZ=function(a){return(a==null?void 0:a.So)\|\|function(){}};_.NZ=function(a){return(a==null?void 0:a.C3)\|\|function(){}};_.yQb=function(a){return(a==null?void 0:a.Wp)\|\|function(){}};._.zQb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.AQb=function(a){setTimeout(function(){throw a;},0)};_.LZ.prototype.uO=function(){return!0};_.OZ=function(a,b,c){a=a.Oc;var d=a.pO,e=new _.AE;b=_.Dj(e,7,_.YVa,b==null?b:_.Oc(b));d.call(a,305,b,c,void 0)};_.wu(_.Ln,_.LZ);._.l();._.k("ziXSP");.var f_=function(a){_.LZ

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.LAa13Y-4SXU.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTutjgcOSyX6KH6kYXJp5HabmF8SGA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	dropped
Size (bytes):	122913
Entropy (8bit):	5.472136552318629
Encrypted:	false
SSDEEP:	1536:KAIcfKjLgtJUzb6xngNEw3qNmSMq601sibL/GDj50frNNyhAnY/rBl6zap+uLU2Q:PIyKbXf4M6J/GDlkap+uhK8C
MD5:	0E46F1208A65DEA2631A3BAD0A09E1FE
SHA1:	F286F70876DB7F668727057AEE401EDBA5269B7D
SHA-256:	94BF15959C201BE7CE4EE345AE3CCE61DE0F85426CFAB1FF596148C834D1C747
SHA-512:	F755466BED39220668C6E7BCE86B52870EBEF536A002654497695DBEA1492287BB42FBF02B5164ED727277063E7D3E70C07BD1936845870F96537DFB34E58011
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6046), with no line terminators
Category:	downloaded
Size (bytes):	6046
Entropy (8bit):	5.351179718154959
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvCnYtPtGYkp:lXT0TGKiqggdaAg8IF8uM8DKnYJtGYkp
MD5:	849539E36F9E3A9AFC528E9F9C777D07
SHA1:	3B46336A970E9448739A0D73065B7A07374C803E
SHA-256:	B2DC7B7325E5B99B54F14FE686519C8E0C86BEE1F59C3C891D89E4E39B39FA99
SHA-512:	1D1006A598E0105A10051644A08117E8946B2E059C3CD6B2FE30D3FEF5647AF37CC93A5C922A4D573D43F0DE1A2BC1D3E79D36542A9340910E33452B7D30CB32
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.LAa13Y-4SXU.L.W.O/m=q_sf,qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTutjgcOSyX6KH6kYXJp5HabmF8SGA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8232, version 1.0
Category:	downloaded
Size (bytes):	8232
Entropy (8bit):	7.970977891824873
Encrypted:	false
SSDEEP:	192:M+IfXuoEfn8duoxJzlW4ANhYkck2pyrtGLBTeK3Ei6eLLO:M+cPg7/h2poEBTeKU4O
MD5:	11C1994DAED4419F53EA81BFA9D131E4
SHA1:	E61AED6167B0B196B9534B6B2B2A3252A283FD3B
SHA-256:	74BA235EBCCF81EF6B13BED997897CD6329DF2A19B9C0BC90AA2D5EC26E3036C
SHA-512:	2B6B5AE24A2CE29B2919D5663724D96936176506B11C72BE3EFEA7D8D54E4BBE3CC7EEAAF581F043E580889F406DB1784C9BA94051EB45E7302960386AB7A95E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2
Preview:	wOF2...... (......N...............................0..@..H.`..H....8....X..6.$..,. .....E...pD%.m. p.@.~vGp42......(..o.t....9.@.$..so...06..:...v..h.(....X.2.^......5. A...).q....?....n...Ify...\|g...2.MvHvS..i.$.,...m.> ..`$`...* .!.Fa4...io.X...].[_t/...w..d..N\|?..Ia.E....M......L.'..je.Y{I...9.P..V.w.....[..Gr:.K....+...Wu.....)..4......;....#..X....@Zm.=..n......5I\|.q..bA....G.G.....?.)......(..p.N.?.g...)Li:)....q....Ct.]........X.\}.....l..m\2...?....R...$....n../sB....OV.{'.Z..J..0.}.QK.C..-5..^.O...l.V.L...k\|.z...w..d..W.K=\..t...G2RL.}....F.....0. ...!R.Cd)...@.. ...j:..#.......T...h.....1l..o."`.b...y.%. v..q....N.B @k..I.....v.<...v...!.Hm_'D...;.@.......i...T.QF._...\|U6.^..F .~..;e3...bA........H..L...N..&......<.....8..q(VbG,.t..P..}H{.&\uK......?8..f."=.#."b3.G......o\|&..J...^.u...=.n. ....c...nH\(" !......Z.....Z09.D<x.@.#. .h.."${.2......@.).....F.9.o0..........,.>x....%.`+.a7......!.C....Pb.....cy.5..:j&mS.R.I.%[..\y..10....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	176608
Entropy (8bit):	5.554849809439588
Encrypted:	false
SSDEEP:	3072:eqnkFl6sU2jNx5jZXhiRU3BaPwoqKBfRHvcuzNvOa3Qsh7P8wOxgdYQ0CkrOqKso:eqn2l6sU2jNx5jZXhIU3BaPwoqKBfRHp
MD5:	81888DD065097D38F452145A68F077FB
SHA1:	633C1E4E7236A56573A65D13864060A8E84BD146
SHA-256:	267B1E970FFB845ECF90D8898EC01DFEA27620B2D53A1B6D51884D6641D1DCE8
SHA-512:	DC24285A5B708D2BBC87433053A618FA836C5FB70223ADEDD61EC82F9CFB3F7DE25FBE27450A1A5601B67EBE44BB37F8BC55804AAE781EBD50B340ACAC9834C7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.6T6r_9V_Ciw.2019.O/rt=j/m=q_dnp,q_sf,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTuWzR02q-lADuEe1tzdVix-MATZjg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.253999438782652
Encrypted:	false
SSDEEP:	48:o74cA4t2qdAJl9Ge/a8MxIluosF97Dwbrurw:ohxUl9Z/wDosFmHSw
MD5:	FF93A29EF55482E16F66237BD08C919F
SHA1:	F4EC56E968ABF4EC19F581F02D8CA6639DEDAE45
SHA-256:	2767694FB0407B989B12C17D54E48F490505B3A798DA3943B436546AD0773584
SHA-512:	17F07EBEE88FE0F0FF175F9D2B67E36273B75736ECC12F2532B4D52BB2B2ABC9B034F104726479BCAC3B4575DC0EADC135926D1211BEF3BA94F9DC48EA47D6F7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.yg(_.Sla);_.oA=function(a){_.W.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.oA,_.W);_.oA.Ba=function(){return{Xa:{cache:_.ot}}};_.oA.prototype.execute=function(a){_.Cb(a,function(b){var c;_.cf(b)&&(c=b.fb.kc(b.kb));c&&this.aa.OG(c)},this);return{}};_.wu(_.Yla,_.oA);._.l();._.k("ZDZcre");.var nH=function(a){_.W.call(this,a.Fa);this.ym=a.Ea.ym;this.v4=a.Ea.metadata;this.aa=a.Ea.Dt};_.K(nH,_.W);nH.Ba=function(){return{Ea:{ym:_.SG,metadata:_.n_a,Dt:_.PG}}};nH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Cb(a,function(c){var d=b.v4.getType(c.Nd())===2?b.ym.Rb(c):b.ym.fetch(c);return _.Rl(c,_.TG)?d.then(function(e){return _.Ed(e)}):d},this)};_.wu(_.cma,nH);._.l();._.k("K5nYTd");._.m_a=new _.uf(_.Zla);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var VG=function(a){_.W.call(this,a.Fa);this.aa=a.Ea.FQ};_.K(VG,_.W);VG.Ba=func

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.875266466142591
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2Bjdw2KsJJuYHSKnZ:lFJuuVTBudw29nu4SKZ
MD5:	87B6333E98B7620EA1FF98D1A837A39E
SHA1:	105DE6815B0885357DE1414BFC0D77FCC9E924EF
SHA-256:	DCD3C133C5C40BECD4100BBE6EDAE84C9735E778E4234A5E8395C56FF8A733BA
SHA-512:	867D7943D813685FAA76394E53199750C55817E836FD19C933F74D11E9657CE66719A6D6B2E39EE1DE62358BCE364E38A55F4E138DF92337DE6985DDCD5D0994
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4jJF8qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.249392304721585
Encrypted:	false
SSDEEP:	24:kMYD7DWQuDORqMSsNrmYK0/9gs7hz1x7vDT/wVJOWaeGbZEsGblSFzM8OVLprGJ:o7DYDORIQ9RX6paeGbisGblS+vrw
MD5:	5B7E4EAF4C0AFDF5404499D594AE353B
SHA1:	CA4D5D4D43AB6B806374914E0D4638E8193C9619
SHA-256:	180858AA19EA935EA20E0339FB6CAD3FE20C685905A3C1F3DDD624FEB094E819
SHA-512:	5A924D708597999B2D7F28D766EEA2C2D5570980F9C1A30600DB921555D25F4236E03CF4D81AD5949656327B568F4F01B6B82ED53C8E2DABD2935C27E8618968
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.n_a=new _.uf(_.Lm);._.l();._.k("P6sQOc");.var s_a=!!(_.Th[1]&8);var u_a=function(a,b,c,d,e){this.ea=a;this.xa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=t_a(this)},v_a=function(a){var b={};_.Ma(a.VS(),function(e){b[e]=!0});var c=a.DS(),d=a.KS();return new u_a(a.zP(),c.aa()1E3,a.iS(),d.aa()1E3,b)},t_a=function(a){return Math.random()Math.min(a.xaMath.pow(a.ka,a.aa),a.Ca)},WG=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var XG=function(a){_.W.call(this,a.Fa);this.da=a.Ea.WV;this.ea=a.Ea.metadata;a=a.Ea.sha;this.fetch=a.fetch.bind(a)};_.K(XG,_.W);XG.Ba=function(){return{Ea:{WV:_.q_a,metadata:_.n_a,sha:_.g_a}}};XG.prototype.aa=function(a,b){if(this.ea.getType(a.Nd())!==1)return _.dn(a);var c=this.da.rV;return(c=c?v_a(c):null)&&WG(c)?_.Eya(a,w_a(this,a,b,c)):_.dn(a)};.var w_a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	247
Entropy (8bit):	6.808806987152524
Encrypted:	false
SSDEEP:	6:6v/lhPXbA73DObS7XG8UyHzt7pvik6Gk6x0dRqbLwoBWfp:6v/7o3SbkUyVZiOB2IHNWx
MD5:	C6849EC5588A3C51C7E113BB4688481A
SHA1:	3CBF513D277015624A9BAE606C8819934A6A742D
SHA-256:	11EA45860601CF37A34F893CEEEAEBA8FA55A92D5FF34293B08786936DA1DFDE
SHA-512:	722BF73250590F1490CAA72A1FF1E3320E882DDC47B4E7046A103CF54AE4A6E9A4207AD1430D89831B37B66F642C28933CB11FE5D8650022F319798434AE285A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s....IDAT8..1..0.E#1..p....r.....@Lp..P`...B$w..T..CU{..Kl.+.......0q.*Nh..3-.I.h..Z.4.-...5c9.^...=m......a<..B.i%.9.,..4....0.....>...\|.(.t8.!.t..c@...4b...bCX...@.... .w.=.IY...H........XM......IEND.B`.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	792
Entropy (8bit):	7.642704506233666
Encrypted:	false
SSDEEP:	24:VYCc25934kGef0S/yvIaL/8Q4HBy9vdek:VHcOePQ0dL/EyYk
MD5:	089AD8854F62CA8726D4129B81310E8F
SHA1:	ABF76DF8618639A4AB1EE2B3D12BAA01BDF507B0
SHA-256:	CC23E907B15D21B0C59B7F18D5444C2A777F58871306896533D7FC6283FC96AA
SHA-512:	E1F40A3908CF56379B0276D7F56CD3430548ED643A61FF9C8B27A866C5436CAD4AA6FE4F5012B591C61F3C8893D34905FDEDAB40A1A45AA58E697061E1EAD2F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH....N.Q......A.4..G......<.DHdM.1>....@`-..E..'`!"...h$...tjg...t...0..z....;g.=...5.^P.z.$p!..G2.y......t....,2G.!.D.-gs.~+.`R6.!aV.@./...~..0.Wx......ra.....xqG.@V..-u..z.O<....g..J-....\|g......mT%.F..._..1..Q........z%..`R..0W...@....J?....g.l.6.q.`@.9.f.C....j....k.P:B..9...+Py.Es..m.h<."...F.3.[m...9..a..B.M".I..8l %.J/Dmc.B.~).P...f#vA.q...R...0k..U....`..00d..[...X.A....../Pd..P.8...wB....K..A!.C...M..[...$T.........P..=....w.}E..-....K.b...%...2e....".e..U.Q.Q...[T.)..s...cra__.....VG.;Q..[.F.q......p.p.8..6.>=.._1....?....h...u4.......;.6Zmp .W./F..+..-b......:..b.#...O..+P.b..c..../...-.%....61..o.$i..Y..X..Mc.:.b....[...mw...2@...9p....c...g.`....d.W..<.......".......IEND.B`.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	271573
Entropy (8bit):	5.568460170388913
Encrypted:	false
SSDEEP:	6144:NlPKG3+NKi0Emw1pD5372Cneg5VlFlr1rI:bPxSKi0uF9i
MD5:	6141F2E6B2686C98AA0C1D828592CE6B
SHA1:	0C24FF4F000867F33D693A0C1B66C60EB0B591FA
SHA-256:	78F963D9D74A58D43F81D0BFB92BD465865DB592A5B3592B4D2E074F60D0ABA7
SHA-512:	994F4EDCE86639644F48741B0949A3CCBB7C34B18DFB71E970956720A78918EB5E67789B5CF70B378B1E9A8652AB1C85B52A71EF3A7710CA19C31402E3B89319
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	5.636521244861347
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljjhiMMS8R/m5DsotL/uvlrq22g1p:6v/lhPZdwRe5DsG/uvl+Wp
MD5:	37DD4A0C4EBDDD1F95D8B09A356068A0
SHA1:	F559CD13D8AA2DDB63689C98FEC6044B1C356E41
SHA-256:	2EE94D2E255F58C5684196BE872CDBF2AB0B3C88A3BD5D6ACB7574992803A13D
SHA-512:	AE8A24C446048CB742C2D9A149BD7CBA4FFA065A3ADDB059559395AEA26B3478ACF70DA85AC782A79B40BD50A2665B9A86E1D20CA0963888F4295EA017BBA19F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36
Preview:	.PNG........IHDR..............w=....CIDATx.c........dAii.\|Z...4.?.......d[2j.M-.....>jxEE........p..Q0..j.\.jOL.....IEND.B`.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54479)
Category:	downloaded
Size (bytes):	1076870
Entropy (8bit):	5.723307785111961
Encrypted:	false
SSDEEP:	24576:X0QIiTqIDTUuM7Eggk1yFSydCkzmfHjkHdt8Li0ocL3aCnrX7qes:X0QIiTqIDTUuMdByFSydCkzmf8mX7qes
MD5:	D6A20523AD892754EC78C8CB075B70CF
SHA1:	670AAA5FA12AFA6D459CC598EB30FAF58825E443
SHA-256:	9F36D55213EF49AF44411B9ECC608472F6E3B0E439A531E04764C9C732512527
SHA-512:	9286311166EF58B81C19DC7D9CFC9BE0C1B070F6890CA6DF01E5C24B4E3577B3B836A804A6BDF332CBA3DFE2A9734E3D9EAA3A37C60A1E40B23C7329DD4C470D
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/?hl=en&sjid=5498862093573706523-EU
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Official Google Chrome Help Center where you can find tips and tutorials on using Google Chrome and other answers to frequently asked questions." name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/5IedHXKVmgXlBYdRn7TlVJmLJbdas2tNrD44
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	176608
Entropy (8bit):	5.554849809439588
Encrypted:	false
SSDEEP:	3072:eqnkFl6sU2jNx5jZXhiRU3BaPwoqKBfRHvcuzNvOa3Qsh7P8wOxgdYQ0CkrOqKso:eqn2l6sU2jNx5jZXhIU3BaPwoqKBfRHp
MD5:	81888DD065097D38F452145A68F077FB
SHA1:	633C1E4E7236A56573A65D13864060A8E84BD146
SHA-256:	267B1E970FFB845ECF90D8898EC01DFEA27620B2D53A1B6D51884D6641D1DCE8
SHA-512:	DC24285A5B708D2BBC87433053A618FA836C5FB70223ADEDD61EC82F9CFB3F7DE25FBE27450A1A5601B67EBE44BB37F8BC55804AAE781EBD50B340ACAC9834C7
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2894
Entropy (8bit):	7.87829726905419
Encrypted:	false
SSDEEP:	48:sGFf1qcoO3De4MaDZLU+ZDUI8qK/+xn61WIECnPk9dTnqxNB9if:sw1qcoqFJUoZu/VyZdrqxr9u
MD5:	2AAC7F580EE8C66ACF54DAC0ACC95DAA
SHA1:	23A7F3ADDB13338BEAEE158512E612FB6587567B
SHA-256:	52C68BC25C43D062CF949A60EA05D08B27F96BCA68C23164018BC62FC9B87491
SHA-512:	3EE02BF5627986A17524438A727977E08F25768344EE6392928B6CDA732C7ACB7B12C0F09D8E7C2F7E7AF97D5454C591DA27CEECFACAD059EC2500789A59AE60
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/chrome/v7/web-64dp/logo_chrome_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx...PSw...,..V+......$.(.H..#..X..nw.....l...V....i.:^x.E...V.tj[Q.A...v...F9<9.\.....%...=....f.3..<...........R..C...E.~.XP...i..%..C5.Y..~.g...-.[..,..)][?SZ..!.h.....H...k.q."..-/.....zT.R\|.A.....x}.x../..).)..YR2H......H...E..E...2}d......(....x.U......O.....-s.w..(W.B......G.E+....<....@.pn7.V.&.G<R.+.q%\.=.\......h.UBs,.}S..z.......e\!D&.....pL..U..tC..\|.A..B.k.! .0.....-...IK..o.+..j..3.!.@...G.i.QN......5A..?p.@K<Q.@.....$..e...U..x.(75.g}..x.Q.....,.Z..5>..2x.=......?..@.\.;...I.L\V.L.V@\|..V\|...?H../+..!.0....x.w....,..Wc......4..Y....h.......\;.h.1..t~......'.......\|.........+.'M.F...\|TQ..z...)....O..........V.....`>%..Qt.......tF......at.2s.y.o....W.{...m....h...m.9.m2..v..q=.+&y..B.;......(...{.o....".$@.K.Sc...O].Pt.....A..0.[d.c.7..~..............CoB1... \|..e6x.0.brR..l1'.M.....;D...>8.....0...........,.&x..-,%C..>..........\|=...k.$:...`...7....~.~....*ZB_E.=......Ua..._@..O.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54472)
Category:	downloaded
Size (bytes):	1069730
Entropy (8bit):	5.726132825361411
Encrypted:	false
SSDEEP:	24576:YUQIiXqIDTUuNnPEggk1yFSydCkzmfIX5HMlcPy0ocL3aCcrXHC8hc:YUQIiXqIDTUuNnhByFSydCkzmffhXi8i
MD5:	28F1BE25FCA191FE7E6036B0C3B6406D
SHA1:	22D0C6B24FAE81AB538D65060436D7449B90A4CA
SHA-256:	3321E607873A66415626BD658453C2F0BB5D62C25D79A4056137F8A4F82DA5DA
SHA-512:	BAE1E526D5A7B6BD12AF482110DCB303CBD13BBB51B03648F0D77757D7E41550F79A50A1E26F60E8E5B39E8413F62022E6FE2D50D0F2A8D6BD4C7960663F0399
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Official Google Account Help Center where you can find tips and tutorials on using Google Account and other answers to frequently asked questions." name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'R

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/homepage_header_background_v2.svg
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4444, version 1.0
Category:	downloaded
Size (bytes):	4444
Entropy (8bit):	7.943236702796996
Encrypted:	false
SSDEEP:	96:sMbEnnGk3N4NvIF1VgJRrSIFiLt8L06PejMUD4Ghm4syPtGjO4:5bEn/N4NvAAjrXQZ8L06PejXD1PVGjt
MD5:	2AEF37096667EFB04AA7F0C1BEDA5366
SHA1:	5CDF7572F100940C6FC1A27E4C997BDB3B6C95B7
SHA-256:	00BBA6533EE69E05126BF0F9E8B81C2A2EFFF265E2B04786E9EC52613AE37C73
SHA-512:	2CF60175E4EAFDAFB65E343B8923081F92F410AC402C5B06956F288B11913F3861184E8156573D67F8D4079E5CBD864AE4339EC20BCF030C8B7B3946777B1DD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2
Preview:	wOF2.......\....../.................................. ....`.......,.;..8..6.$..B. .........D..x.8...u%.?%.1v..A5.).S.JU.m..j..Y^...n.............x.i.H.N..!X..H...^.4...h.v..x".$3i".5.Q5.H$J5..y~...}Ox.F?..``%J...p..+......~...h..{.{...."K..8..g.._...w..{.....U.B.....?..Gp"0.g...G.......n...U.z......?..nv!....{5..D..v$...$.._Z......E/....5..{..}0y.'....K...S.]......'....d_>a..).b...y.$\Y...u=............<e...7.0>...SD.....'.H.(.C2.@TJ!F6..\|H.&H..H.A.).........!..&MYl.......%(G.z.........k......."..F.~.wC.q>.._... i1A.^....Il...!v....bP.!.&...i...Wz)..GQ.\|..K...jp...%....'/....h..C.}wq&TS..C..........5..F.js....3....m..\|.`.K-m..zk..\]..m....XSNi%.......K..#.?...P....?a...g........L.}..~z...\|._.S................../.[q=...x..PC.... ......8.....)..?6.~..P...\|B.hJ....~C[.2B.....}.>..[..:.N8.j.!t..,@'..\J..{.IR$.ri..T..T....l.R.....Y.I.@f.g]......lL.DL.DTb".......{Ff .0{...c.M.t.e..J4.....#V..f..z. .*..`.....q..%.....;.."{E.....u.C..P.:.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
URL:	https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3653
Entropy (8bit):	7.928890449325803
Encrypted:	false
SSDEEP:	96:5kxUHWOwsRWCbRykZguODi897DRqAi4+1RMF7XmJQMEw:5fjAARyG389DRqAif1GsCbw
MD5:	9C63745DD58E622C67B763C56B04E0EC
SHA1:	3DF427B09C21120DA55F6EF396BC19C3A567F76D
SHA-256:	CCB7B6FC6814D838946C52D17A82BB3E6B9AD2C9DB3D6207CEB17C34241BC4FC
SHA-512:	D905BECD98E97E8CF7C9F5FA94804AA1154AFAA9C34DD671494EDC1562A9DE44B2472EDB17F4BD855463B4C7CF3D67B9006D5D2923A4E6688212E62651963D20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....IDATx^.k...u...v.s./..Co.....B..%..7.!...!\.....N.Pvl..@.R.I.V,.1...CLR6..!$!....g....$..v...G?..4....xvV.$...kzzf?....{.t....#}$.y....^....]7.8..<.m.K'l..gF....p.%.Am...N.....g.r.cmJ...........".G..<.>j...:.........s.I6...qDg.B."P@.X...R-./..........'...V...P..u.E..37k.]..7.Z..6....;J...T.A...9a..{>....pa6..ZV../.....2\......D.H8w.=..w3.....u.e.a.G./.C.T9....8..M..-..0....a....7..... .~...V"..........+..M.-r....]...s\.F../...D.Vl.....r7m.5.?9........M...'%W...^.\|.RE.........x..#b...}.x#.q'W.`#.h.C.\.........M..I.:.v...[E.h.25......!..k..\|X.Xy.II'....7V.l.YT-V.L...HI..4..?...j..I#.....m.^.....\|...H.P...?kK.lH.<r...{V..-X,!q...P=8.T....}......._@.9T.......O.........Bi_.J...c.>#T...cUl..tJf.._.......7.......,.B.X.(....O...h-..w..$S.O..o..\.h..?..\|..a.Y.j;.Voa...1.U.U...A....1F.Up..*...`.:.L.....b....?....E..d..`Q TET.@..I.OA.TAL..Z.....p../-...{......pG.....%kw0gk.#.CJ.5.F.1.. "8"...DF..G..J..Ij.Y4.9.d{

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54380)
Category:	downloaded
Size (bytes):	1188206
Entropy (8bit):	5.704283142794409
Encrypted:	false
SSDEEP:	24576:qJoQIiyqIDTUulLNBEggk1yFSydCkzmfqEhHqorqCi0ocL3aCcrX1sHT04zhwWc/:qJoQIiyqIDTUulLNnByFSydCkzmfkhXJ
MD5:	11CFC83F9E335F442E794AB318FEFB4F
SHA1:	91E0B629CBA5449574BD8ECE8A19F7861E3426E8
SHA-256:	A8C54B77629425271937B4F4C80B9AF6459C96CE5BDF4F7415A6E9E05A874A2C
SHA-512:	BFC1889A9145DFE5178ED76602AB63593A5C7CDAB2DD3B85A199676C3367024B960E2D97784C7C1CBC9718C3115DC07F73C79EE3B99DD8BD243DAC82B9A8839B
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chromebook/answer/1057090
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Use a Chromebook as a guest - Chromebook Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="To use a Chromebook without signing in, you can browse as a guest. Guest mode is useful if you want to: Let someone borrow your Chromebook. Borrow someone else.s Chromebook. Use a shared or pu" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chromebook/answer/1057090?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+046

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	354
Entropy (8bit):	7.216544428883911
Encrypted:	false
SSDEEP:	6:6v/lhPrdj2k4Q2ux4vXUuq5ak1llGV576rOX3VaxaAg9InFZyBsp:6v/7zdjWfUuq4olcTlaRbyBe
MD5:	589A470F28D5D135D72306FA9FF1E335
SHA1:	DD5C795650DA00C327FF41693FB9C327DC8CCBD6
SHA-256:	8B65E9D1574C503C9619DF8B9E1C459C533832D3F5F876335F8F5CA752C9BC9F
SHA-512:	0C5F43AE411F3C3110E682708FA0AD813813120E0EB669F34D59D80D962FAB3FC7D176CCACF08222FEE4CC7CB3D40DA30E077E8B4862E2AAEEDA7487E764849C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...)IDATx..R.L5P..QCvS...!.i.........2.7.9.6.....w.??5..o......!^h../P./...+a..X.SI>.d...:..3j......WP.y...\|...f......ML...y!.\|.._....H.A.....1.@#>.E....d..;p.q...D...C......,.W.FI..<}...o.WB\.e.....C....#L3..D3.Y.Jc..lT..#....Ut[H.H#.$.)+-4..qBR%.t25/...s.2..!Y`.'H.....w.....-.T..........f$.&....IEND.B`.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.253999438782652
Encrypted:	false
SSDEEP:	48:o74cA4t2qdAJl9Ge/a8MxIluosF97Dwbrurw:ohxUl9Z/wDosFmHSw
MD5:	FF93A29EF55482E16F66237BD08C919F
SHA1:	F4EC56E968ABF4EC19F581F02D8CA6639DEDAE45
SHA-256:	2767694FB0407B989B12C17D54E48F490505B3A798DA3943B436546AD0773584
SHA-512:	17F07EBEE88FE0F0FF175F9D2B67E36273B75736ECC12F2532B4D52BB2B2ABC9B034F104726479BCAC3B4575DC0EADC135926D1211BEF3BA94F9DC48EA47D6F7
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.yg(_.Sla);_.oA=function(a){_.W.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.oA,_.W);_.oA.Ba=function(){return{Xa:{cache:_.ot}}};_.oA.prototype.execute=function(a){_.Cb(a,function(b){var c;_.cf(b)&&(c=b.fb.kc(b.kb));c&&this.aa.OG(c)},this);return{}};_.wu(_.Yla,_.oA);._.l();._.k("ZDZcre");.var nH=function(a){_.W.call(this,a.Fa);this.ym=a.Ea.ym;this.v4=a.Ea.metadata;this.aa=a.Ea.Dt};_.K(nH,_.W);nH.Ba=function(){return{Ea:{ym:_.SG,metadata:_.n_a,Dt:_.PG}}};nH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Cb(a,function(c){var d=b.v4.getType(c.Nd())===2?b.ym.Rb(c):b.ym.fetch(c);return _.Rl(c,_.TG)?d.then(function(e){return _.Ed(e)}):d},this)};_.wu(_.cma,nH);._.l();._.k("K5nYTd");._.m_a=new _.uf(_.Zla);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var VG=function(a){_.W.call(this,a.Fa);this.aa=a.Ea.FQ};_.K(VG,_.W);VG.Ba=func

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	dropped
Size (bytes):	6662978
Entropy (8bit):	7.958019049174792
Encrypted:	false
SSDEEP:	98304:vOtzAWupkd4f3qiFd74STXkQAW0ZwRy8gNxhFRfhdOReIgDgvVTiafAOZFMrj:GpA7ydWqyrp0uy8gLRqe1yi+ZFUj
MD5:	7F23B1A0498132624D50ADB2C7902239
SHA1:	0F7EB735C6EC74F004D9208531C281D49CB1FE9F
SHA-256:	93BC9E63A8F2725DCD5FA43414530EF566C878901618644621B948D0F7599460
SHA-512:	3CD26043223EAB955251CCA8032C7EAAAB9D68823C858D8C3EA35BAEC093FCFB29AE3DA2CC3A0E0F698D0E203AC47ED79C75DFA8BB47B77D51BE014203D00810
Malicious:	false
Reputation:	low
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8................................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	7.216544428883911
Encrypted:	false
SSDEEP:	6:6v/lhPrdj2k4Q2ux4vXUuq5ak1llGV576rOX3VaxaAg9InFZyBsp:6v/7zdjWfUuq4olcTlaRbyBe
MD5:	589A470F28D5D135D72306FA9FF1E335
SHA1:	DD5C795650DA00C327FF41693FB9C327DC8CCBD6
SHA-256:	8B65E9D1574C503C9619DF8B9E1C459C533832D3F5F876335F8F5CA752C9BC9F
SHA-512:	0C5F43AE411F3C3110E682708FA0AD813813120E0EB669F34D59D80D962FAB3FC7D176CCACF08222FEE4CC7CB3D40DA30E077E8B4862E2AAEEDA7487E764849C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/I_WmI3LNwth97khKinjXICi2CSSW7UA6bssc1HaDBPTg9o8SYexzNgGgfelYzKtd-nA=w36-h36
Preview:	.PNG........IHDR.............J~.s...)IDATx..R.L5P..QCvS...!.i.........2.7.9.6.....w.??5..o......!^h../P./...+a..X.SI>.d...:..3j......WP.y...\|...f......ML...y!.\|.._....H.A.....1.@#>.E....d..;p.q...D...C......,.W.FI..<}...o.WB\.e.....C....#L3..D3.Y.Jc..lT..#....Ut[H.H#.$.)+-4..qBR%.t25/...s.2..!Y`.'H.....w.....-.T..........f$.&....IEND.B`.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	172721
Entropy (8bit):	5.557490102329871
Encrypted:	false
SSDEEP:	3072:eqnkFl6sSNx5jZXhiRU3BaPwoqKBfRHvcuzNvOa3Qsh7P8wOxgdYQ0CkrOqKs9G5:eqn2l6sSNx5jZXhIU3BaPwoqKBfRHvcK
MD5:	2243840E62376D41E9808357D3214D67
SHA1:	D21E0BD29337BF1A34900D0216B961824DE87E48
SHA-256:	482BC6E3D5DBB7C5764B3CC6D1B951E90B904E57BE314990A7D89B6FDDC580BF
SHA-512:	6C590D71FD4C7FD51071F93DC548B4964C0D4EE1FE6781EBBCDA9FE4127FF631F4AEA00DC69B926EFE40522FFF23C499387B4BB11487F0596DF150CE675D9FB6
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	271566
Entropy (8bit):	5.568404129253388
Encrypted:	false
SSDEEP:	6144:NlPKG3+NKaWEmw1pD5372Cneg5VlFlr1rI:bPxSKaWuF9i
MD5:	6376EC44E0CAAECB64007D6A86F41177
SHA1:	0A3A1C5EE5923767CA83F0F8B6747014EA7594A3
SHA-256:	25A7705BA2B1457889E576ABBF3B25C07203D0E04DFEAD90E5C80469EFF2CC71
SHA-512:	51C9D08AECA65D34F51476207C6298DCF03D987C7C72E1EB25E1F23040E52DD2075EB0093A06A3E7D2E1C7EE3FE9EE4AFA4815A316DDF1BE5373029A0A5C22E5
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2894
Entropy (8bit):	7.87829726905419
Encrypted:	false
SSDEEP:	48:sGFf1qcoO3De4MaDZLU+ZDUI8qK/+xn61WIECnPk9dTnqxNB9if:sw1qcoqFJUoZu/VyZdrqxr9u
MD5:	2AAC7F580EE8C66ACF54DAC0ACC95DAA
SHA1:	23A7F3ADDB13338BEAEE158512E612FB6587567B
SHA-256:	52C68BC25C43D062CF949A60EA05D08B27F96BCA68C23164018BC62FC9B87491
SHA-512:	3EE02BF5627986A17524438A727977E08F25768344EE6392928B6CDA732C7ACB7B12C0F09D8E7C2F7E7AF97D5454C591DA27CEECFACAD059EC2500789A59AE60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....IDATx...PSw...,..V+......$.(.H..#..X..nw.....l...V....i.:^x.E...V.tj[Q.A...v...F9<9.\.....%...=....f.3..<...........R..C...E.~.XP...i..%..C5.Y..~.g...-.[..,..)][?SZ..!.h.....H...k.q."..-/.....zT.R\|.A.....x}.x../..).)..YR2H......H...E..E...2}d......(....x.U......O.....-s.w..(W.B......G.E+....<....@.pn7.V.&.G<R.+.q%\.=.\......h.UBs,.}S..z.......e\!D&.....pL..U..tC..\|.A..B.k.! .0.....-...IK..o.+..j..3.!.@...G.i.QN......5A..?p.@K<Q.@.....$..e...U..x.(75.g}..x.Q.....,.Z..5>..2x.=......?..@.\.;...I.L\V.L.V@\|..V\|...?H../+..!.0....x.w....,..Wc......4..Y....h.......\;.h.1..t~......'.......\|.........+.'M.F...\|TQ..z...)....O..........V.....`>%..Qt.......tF......at.2s.y.o....W.{...m....h...m.9.m2..v..q=.+&y..B.;......(...{.o....".$@.K.Sc...O].Pt.....A..0.[d.c.7..~..............CoB1... \|..e6x.0.brR..l1'.M.....;D...>8.....0...........,.&x..-,%C..>..........\|=...k.$:...`...7....~.~....*ZB_E.=......Ua..._@..O.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.308347802561222
Encrypted:	false
SSDEEP:	96:oo5mEkAVSoYSvSgNBTeLZBagj9PIauzLmybxf8Vh15b6r/Nm2TmpI6qLw:N4lAFDLxAPSVaGZ+yc
MD5:	6A2A5DC595FA915688C2C15E9064AA76
SHA1:	487184814F226A80611F104C57D106039CD6E1D3
SHA-256:	24744179DFE1C2C520A76978B7071234322C995EAE18BB0050DFB490BCB51B2C
SHA-512:	70ED0557426BB994F5D4BD849AC47C1D73726443A7D8B126D66186857A0216F19134EF77CF0116D57DA524A9E22703D2CC3173AA6D3E243BD45A387EAAC8B475
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xNa=_.z("wg1P6b",[_.cB,_.Nn,_.Vn]);._.k("wg1P6b");.var q6a;q6a=_.uh(["aria-"]);._.BJ=function(a){_.Y.call(this,a.Fa);this.Ka=this.xa=this.aa=this.viewportElement=this.Na=null;this.Ic=a.Ea.ef;this.ab=a.Ea.focus;this.Ec=a.Ea.Ec;this.ea=this.Vi();a=-1*parseInt(_.No(this.Vi().el(),"marginTop")\|\|"0",10);var b=parseInt(_.No(this.Vi().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.ff(this.getData("isMenuDynamic"),!1);b=_.ff(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.ru(this,.r6a(this,this.aa.el())));_.sF(this.ta())&&(a=this.ta().el(),b=this.we.bind(this),a.__soy_skip_handler=b)};_.K(_.BJ,_.Y);_.BJ.Ba=function(){return{Ea:{ef:_.gF,focus:_.SE,Ec:_.Au}}};_.BJ.prototype.JF=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.Dz)?(a=a.data.Dz,this.Ca=a==="MOUS

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	6.7875183272221475
Encrypted:	false
SSDEEP:	6:6v/lhPW/kW8R1sCHpNEAX5L4AEx/n4rvUchj8dj3lz5daTp:6v/7usW8mCHpN75L4AEx/n47Fqdblz5K
MD5:	54083AB6A6D00D542C3D79EE0BE26A9B
SHA1:	4814B1DB82A4BF5B36A40BB12C718BA83F3346DB
SHA-256:	1E3959ACE94C2F8FD4BF9F71EAE6DC8A92B5A8BAF63E352D8D7C4692B071A126
SHA-512:	6E291603CD6D2715F8312E5BC65C38B3449E74C20C60533927D7B418F838CBC61F3482D479C9F13F35509E2458C9B0D841659668A258FCB013BE4C22DF9C780E
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/qKgFaX5QZWIhOUQsabCu7DzjEbnWZExeSgin
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8O.A..0.Eg,.K=.b4=N..=.....h....k.#.D.jIJ.f......!..H..c..".........[.ZIy2#.h\lj..,.3..].}..M!....W......l.9D........p..4.'./.$.....}:M...<..U^v... .e..vi...J..m..3....G!...h.^.37...(.....IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4069
Entropy (8bit):	5.38158802454535
Encrypted:	false
SSDEEP:	96:GSqd6IKpLc2LWvAI3HvtVqEUy4kzsQ5IWdw:6oIKPLWvZHvt7Uy4S4f
MD5:	EB9A9E3F39936D89B32CA64B4DFD06CD
SHA1:	E0BD0427B5BEE95F2374EF1C4A1414396BBA8F97
SHA-256:	0B71496EAE4BBF8E8B13F4E22A4482BEFE6C19AC4D1B24ADC90F33DEE203E945
SHA-512:	B1F2EFCA5D7256C92010E208BE0E1E0D74F379649800DD934D48E9C02F0295A9C117284070205E55421A33FC79241D11FBA0C917CBA59DF0B9A14EC189F395D8
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.-K320xY19SM.es5.O/ck=boq-identity.AccountsSignInUi.O1EYjscQ2Gc.L.B1.O/am=5MFglAzTCATEH54DekCRQMgBAAAAAAAEAAAbAADoMQ/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHKuSSQMfSv-bK--5bExj2bvdQZIg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.yg(_.lqa);._.k("sOXFj");.var Cu=function(a){_.W.call(this,a.Fa)};_.K(Cu,_.W);Cu.Ba=_.W.Ba;Cu.prototype.aa=function(a){return a()};_.wu(_.kqa,Cu);._.l();._.k("oGtAuc");._.Gya=new _.uf(_.lqa);._.l();._.k("q0xTif");.var Aza=function(a){var b=function(d){_.ho(d)&&(_.ho(d).Jc=null,_.Mu(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Yu=function(a){_.ut.call(this,a.Fa);this.Qa=this.dom=null;if(this.Bl()){var b=_.Km(this.Wg(),[_.Wm,_.Vm]);b=_.xi([b[_.Wm],b[_.Vm]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.ru(this,b)}this.Ra=a.Cm.Uea};_.K(Yu,_.ut);Yu.Ba=function(){return{Cm:{Uea:function(a){return _.Ye(a)}}}};Yu.prototype.Ip=function(a){return this.Ra.Ip(a)};.Yu.prototype.getData=function(a){return this.Ra.getData(a)};Yu.prototype.Co=function(){_.Ut(this.d

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255
Entropy (8bit):	6.7875183272221475
Encrypted:	false
SSDEEP:	6:6v/lhPW/kW8R1sCHpNEAX5L4AEx/n4rvUchj8dj3lz5daTp:6v/7usW8mCHpN75L4AEx/n47Fqdblz5K
MD5:	54083AB6A6D00D542C3D79EE0BE26A9B
SHA1:	4814B1DB82A4BF5B36A40BB12C718BA83F3346DB
SHA-256:	1E3959ACE94C2F8FD4BF9F71EAE6DC8A92B5A8BAF63E352D8D7C4692B071A126
SHA-512:	6E291603CD6D2715F8312E5BC65C38B3449E74C20C60533927D7B418F838CBC61F3482D479C9F13F35509E2458C9B0D841659668A258FCB013BE4C22DF9C780E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8O.A..0.Eg,.K=.b4=N..=.....h....k.#.D.jIJ.f......!..H..c..".........[.ZIy2#.h\lj..,.3..].}..M!....W......l.9D........p..4.'./.$.....}:M...<..U^v... .e..vi...J..m..3....G!...h.^.37...(.....IEND.B`.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	6.254651473237728
Encrypted:	false
SSDEEP:	3:yionv//thPljll8llkW8LtsF9jNFBsPcvsgKRl/aLQw1soQUVmmGv8DbpglH1p:6v/lhPW/kW8ROFBsPIPKRlCWoQUVRGwY
MD5:	6EB92AB5A3C438EED61EE756BEBBAE90
SHA1:	0A9AB347DF3F8649C15BF3CC66DC09A62DFA7BAD
SHA-256:	A834E710FF494BF7B160E1F8A93F67433EAF66DF1DF2660ACD868A4A44FAE88F
SHA-512:	5A2AB9716205A2B94FF2785FD1F579EB07CAC4C59C5029C95F270C348D43654A32113DA148DC7C055D009C9EF21643E39DA9DA18BB7BEC50151D3F3C1CE2CF75
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/Q4WbrXrEPnGSa4VBIc7BYecfja8IeLrz1Byw
Preview:	.PNG........IHDR.............V.W....sRGB........zIDAT8Ocd..`..9... ...C......../......:..y...9..nG.30J.2......;wY..Q. ..BCC.W.^...k`....L......".j..H.....e.....n.fZJ}....Z..L......IEND.B`.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5844
Entropy (8bit):	5.415349535776294
Encrypted:	false
SSDEEP:	96:GhOEazFZMOEaK3qOEanOEaxVc+u+OEa7NJhOXa7FZMOXa93qOXagOXaeVc+u+OXA:GuPK3Ngdk3tA93OokLfLy13Eq8tZ
MD5:	3C381348DA6E25F8F2F5C62ACA414D5A
SHA1:	FA92E3CA538EE1DDAC023A9AD6C0551B9CBB40C6
SHA-256:	52B65CA72EBF03D7D7CD82BD244A092680E3064034C46DFEDAE259620AA85979
SHA-512:	606E36871A12EDB3BC041F5F0CABCCF0A19873A99664198EBD01AF420B41615FA1970EAD15C0AF52B4B6FC12CF76C0704820709F172EB9A02EEF58CEA832B8C0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16396, version 1.0
Category:	downloaded
Size (bytes):	16396
Entropy (8bit):	7.985827035156134
Encrypted:	false
SSDEEP:	384:Lha7McMVhiB+XmITjsy+wHXjov+sc8idzmAKUcLIS:Va7McSPXpjsy+wHzu+nZdKDUcLr
MD5:	A2EDB5C7EB3C7EF98D0EB329C6FB268F
SHA1:	5F3037DC517AFD44B644C712C5966BFE3289354C
SHA-256:	BA191BF3B5C39A50676E4ECAE47ADFF7F404F9481890530CDBF64252FBB1A57E
SHA-512:	CC5644CAF32302521CA5D6FD3C8CC81A6BBF0C44A56C00F0A19996610D65CF40D5BAE6446610F05A601F63DEA343A9000E76F93A0680CFBF1E4CF15A3563A62C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......@...........?...........................<..l..:.`..:........d.....6.$..(. .....N.....5x.-.v.?..,...<Sn..O/.<.... ......{r2D!v@..?...."..F..\3...-5B....x.).x.$ze._c.l.)~Y..YE.J.e.uW.%).?..T.].q_7y.4...$....t.F #t8.j...GO..k..&.Ecb.X..m#.........k.s.Fr...<q~.@].PHN?..w.h.f...!h..A,H......H.R.T.R.......)...m..}u...".)(J.......>!. .V-....E^.bQ.....U.....u.s?$3.L$...y.........LpB.H.=...."R]\|=..._.o..W....N.j2.L.D.....{.<..s.W1I. zHx:..I.......G..~.6..E.&I4.J..h.Y...uM..D.z.u..)......<...T.......U...k...O......C.!vCy....&..y......t....e...(#.......%v..;.XTS...,....A.w.....K...vv.AI..~y..t..f.....D!...h.."e...h.pQ..{...\..G.......K.[.R....{.%]].0...!i.. ....w......4...`G.2...GD.wZV"...I.......tGQ.<..d..P...o.{......].hI#.....(..0_d..%....E.....?.\|...)...U."b....1bT.....~.U.[.NJ%....hW....s.;.Vm.}]..2............<...\|q.yW.x....sar!.J. .D...z..GcH.~k.r. >..kY...$2D..B@0.5.6.:...T.xr.~. `M...;.?..b6.Puc,.P.....F.pU.a.f_.xS.....IV.r~......6"..AX.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54338)
Category:	downloaded
Size (bytes):	1189587
Entropy (8bit):	5.704118487290568
Encrypted:	false
SSDEEP:	24576:X7BQIi6qIDTUu0WEggk1yFSydCkzmfZH3HeU77i0ocL3aCnrX6JjB04zhmWOSW:X7BQIi6qIDTUu0cByFSydCkzmf6mX6jY
MD5:	0A1397E61EA9113384C82AC4F422DFD0
SHA1:	E519FA1D0D2799D2F8D81AD204BFDC85C8865453
SHA-256:	DA5F372FD1FEFA9949E8DD74989E09CE00374024431FE71414873E99C4BFA661
SHA-512:	2F85FA8A5D8F25D212E3AA378C0445F9B298884A9AEF8631600BD36A0C580382B2A4A4DF9B86F96316A2FABC4A68E1A91B0BF827BCB2B950C0A21ABBE88C5757
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/6130773?hl=en
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Important: Only log into sensitive websites on devices of people that you trust. Owners may be able to gain access to your data. In Guest mode, you won't find or change any other Chrome profile's inf" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKO

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 12:49:20.632528067 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:20.632538080 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:20.741924047 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:26.326812029 CEST	49709	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:26.327008963 CEST	49710	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:26.331577063 CEST	80	49709	142.250.186.101	192.168.2.5
Oct 10, 2024 12:49:26.331743002 CEST	80	49710	142.250.186.101	192.168.2.5
Oct 10, 2024 12:49:26.331765890 CEST	49709	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:26.331788063 CEST	49710	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:26.341146946 CEST	49710	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:26.346023083 CEST	80	49710	142.250.186.101	192.168.2.5
Oct 10, 2024 12:49:26.964620113 CEST	80	49710	142.250.186.101	192.168.2.5
Oct 10, 2024 12:49:26.975321054 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:26.975419044 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:26.975507975 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:26.975683928 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:26.975714922 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.004712105 CEST	49710	80	192.168.2.5	142.250.186.101
Oct 10, 2024 12:49:27.642000914 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.642388105 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:27.642452955 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.644131899 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.644212961 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:27.645411015 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:27.645509005 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.645598888 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:27.645616055 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:27.689847946 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:28.018632889 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:28.018727064 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:28.018824100 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:28.019439936 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:28.019489050 CEST	443	49711	142.250.185.197	192.168.2.5
Oct 10, 2024 12:49:28.019516945 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:28.019551039 CEST	49711	443	192.168.2.5	142.250.185.197
Oct 10, 2024 12:49:29.747423887 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:29.747479916 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:29.748590946 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:29.748590946 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:29.748635054 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:29.795341015 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:29.795358896 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:29.795773029 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:29.799417019 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:29.799432993 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:30.243694067 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:30.243743896 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:30.355042934 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:30.394052029 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:30.394303083 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:30.394328117 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:30.395975113 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:30.396043062 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:30.433258057 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:30.433329105 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:30.437622070 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:30.437632084 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:30.437980890 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:30.469748020 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:30.470211983 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:30.484229088 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:30.517713070 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:30.517721891 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:30.564615011 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:30.897680998 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:30.939429998 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.093333006 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.093432903 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.093518972 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.098195076 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.098222971 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.098232985 CEST	49717	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.098237991 CEST	443	49717	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.199127913 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.199213028 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.199289083 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.201549053 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.201584101 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.822128057 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.822659969 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.825128078 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.825155020 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.825839996 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.827744007 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:31.871459007 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:31.982460976 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:31.982582092 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:32.071717978 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:32.071871042 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:32.079186916 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:32.107676983 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:32.107677937 CEST	49719	443	192.168.2.5	23.60.203.209
Oct 10, 2024 12:49:32.107747078 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:32.107774973 CEST	443	49719	23.60.203.209	192.168.2.5
Oct 10, 2024 12:49:35.846894979 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:35.846918106 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:35.847441912 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:35.847845078 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:35.847858906 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.478698015 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.479463100 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.479474068 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.480235100 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.480307102 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.481240988 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.481286049 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.483922958 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.484181881 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.485197067 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.485205889 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.532594919 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.793061972 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.793207884 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.793272972 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.793291092 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.793312073 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.793330908 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.793338060 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.793374062 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.799066067 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.799128056 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.805377007 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.805440903 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.805490971 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.805537939 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.811681986 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.811795950 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.817964077 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.818033934 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.818084955 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.818139076 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.879420042 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.879486084 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.879537106 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.879589081 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.882289886 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.882355928 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.888590097 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.888659000 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.888708115 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.888762951 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.894886971 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.894961119 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.901065111 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.901144028 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.901180983 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.907480001 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.907540083 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.907552004 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.913913012 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.913976908 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:36.913988113 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.914211988 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:36.914271116 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:37.014789104 CEST	49741	443	192.168.2.5	142.250.185.206
Oct 10, 2024 12:49:37.014811039 CEST	443	49741	142.250.185.206	192.168.2.5
Oct 10, 2024 12:49:37.540034056 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:37.540127039 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:37.540292025 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:37.543436050 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:37.543469906 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.156791925 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.156891108 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.157080889 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.159688950 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.159728050 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.176597118 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.176989079 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.177017927 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.177520990 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.177712917 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.178519964 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.178759098 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.182337046 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.182420015 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.182646990 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.182656050 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.226799011 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.523971081 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.524549961 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.524631977 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.793387890 CEST	49743	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.793467999 CEST	443	49743	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.794337034 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.794388056 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.794450045 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.833218098 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.938311100 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.995605946 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.995629072 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.996694088 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:38.996709108 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.998352051 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.998393059 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:38.998428106 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.000919104 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.000988960 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.000998020 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.002765894 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.002958059 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.042239904 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.042258978 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.250027895 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.265218019 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.265858889 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.265975952 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.318146944 CEST	49745	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.318181992 CEST	443	49745	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.319397926 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.319427013 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.319514036 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.320086956 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.320103884 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.677469969 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.726394892 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.784766912 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.784784079 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.786313057 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.786384106 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.788827896 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.788896084 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.821557045 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.821743011 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.821818113 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.821841002 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.821854115 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.874699116 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.991966963 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.992363930 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.992383003 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.993588924 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.993668079 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.996090889 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.996170998 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.996403933 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.996553898 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.996562958 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:39.996572971 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:39.996583939 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.043406010 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.046561003 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:40.046569109 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.122109890 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.122814894 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.122878075 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:40.123809099 CEST	49751	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:40.123828888 CEST	443	49751	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.214111090 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.214188099 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:40.214622021 CEST	49752	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:40.214643955 CEST	443	49752	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:40.304265976 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:40.304419041 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:40.304477930 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:40.348474026 CEST	49716	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:40.348494053 CEST	443	49716	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:40.348953009 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:40.349041939 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:40.349128962 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:40.349720001 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:40.349756002 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:40.451312065 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:40.451345921 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:40.451483011 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:40.451809883 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:40.451828957 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:40.984230995 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.046787977 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.086575031 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.249913931 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.535135984 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.535173893 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.535264015 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.535326004 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.536684990 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.536763906 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.536798954 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.536833048 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.539354086 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.539407015 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.539414883 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.580461025 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.580673933 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.581754923 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.581995964 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.582576990 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.582587957 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.582689047 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.627403021 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.748743057 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.769157887 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:41.769239902 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:41.769330978 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:41.770587921 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.770689011 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.770745993 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.770765066 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.770948887 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:41.770982027 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:41.776151896 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.776237965 CEST	443	49761	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.776302099 CEST	49761	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.778635025 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.778666019 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.778752089 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.779618979 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:41.779644012 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:41.848722935 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.848839045 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.848906994 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.848931074 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.848958969 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.849021912 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.849051952 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.849364996 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:41.849432945 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.850640059 CEST	49759	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:41.850682974 CEST	443	49759	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:42.422949076 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.423041105 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.424572945 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.425709009 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.425729990 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.425985098 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.426002026 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.426146984 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.426856041 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.426942110 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.427855015 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.427918911 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.432380915 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.432466030 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.432702065 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.459348917 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.475322008 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:42.475409031 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.475425959 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:42.475552082 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:42.475900888 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:42.475930929 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:42.499423027 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.547642946 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.547704935 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.557766914 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.557823896 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.557876110 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.557914019 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.557934999 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.557956934 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.557987928 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.557987928 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.561161041 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.643696070 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.643745899 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.643830061 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.643898010 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.643940926 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.644216061 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.646055937 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.646100044 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.646141052 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.646156073 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.646193027 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.646218061 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.701828957 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.702012062 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.702075958 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.703557968 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.703645945 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.703977108 CEST	443	49764	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:42.704049110 CEST	49764	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:42.731306076 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.731350899 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.731403112 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.731467962 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.731508017 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.731528997 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.732471943 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.732513905 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.732562065 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.732573986 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.732603073 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.732631922 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.733443975 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.733486891 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.733519077 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.733530045 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.733556986 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.733575106 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.734325886 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.734366894 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.734404087 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.734414101 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.734441042 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.734464884 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.818871975 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.818943977 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.819017887 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.819082975 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.819120884 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.819605112 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.819657087 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.819700003 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.819715023 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.819746971 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.819766045 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.820090055 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.820137978 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.820178032 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.820188999 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.820219040 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.820242882 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.820971966 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.821011066 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.821050882 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.821062088 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.821096897 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.821115971 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.821913004 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.821959019 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822047949 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822057962 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822094917 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822120905 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822702885 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822748899 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822788000 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822798967 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822834969 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822849035 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822849989 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.822876930 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.822915077 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.823015928 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.825109959 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.880863905 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.882428885 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.882476091 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.882509947 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.882528067 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.957540989 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.957581043 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.957663059 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.958825111 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.958885908 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.958991051 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.959928989 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960025072 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.960097075 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960735083 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960755110 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.960824013 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960861921 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.960896969 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960903883 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.960916996 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.961173058 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.961195946 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.961862087 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.961890936 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.962601900 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.962613106 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:42.962702036 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.962796926 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:42.962805033 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.137490988 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.170504093 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.170562029 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.174212933 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.174333096 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.174855947 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.175036907 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.175106049 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.175129890 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.250181913 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.313946962 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.314034939 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.318912029 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.318926096 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.326561928 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.326656103 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.326773882 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.326997042 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.327023983 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.413412094 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.413544893 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.413608074 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.413634062 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.413736105 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.413798094 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.413806915 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.414016962 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.414081097 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.415910006 CEST	49766	443	192.168.2.5	142.250.185.164
Oct 10, 2024 12:49:43.415929079 CEST	443	49766	142.250.185.164	192.168.2.5
Oct 10, 2024 12:49:43.611484051 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.612055063 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.612076998 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.614839077 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.614850044 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.628063917 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.628757000 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.628767967 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.629358053 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.629362106 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.630891085 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.631445885 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.631496906 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.631958008 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.631969929 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.647983074 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.648293018 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.648303986 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.648988008 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.648993015 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.710736036 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.710882902 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.710947037 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.711090088 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.711108923 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.711124897 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.711132050 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.722347975 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.722439051 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.722554922 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.722922087 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.722958088 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.731738091 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.731767893 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.731817961 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.731833935 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.731875896 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.731880903 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.731919050 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.732126951 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.732140064 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.732146978 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.732151985 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.732928038 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.732981920 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.733045101 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.733107090 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.733140945 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.733215094 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.733266115 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.733304024 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.733328104 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.733341932 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.749923944 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.749949932 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.750175953 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.751765013 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.751818895 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.751871109 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.751883984 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.751929998 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.751936913 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.751991987 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.752038002 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.806180954 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.806235075 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.806438923 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.806457996 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.806467056 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.806472063 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.809195995 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.809252024 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.809334993 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.809449911 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.809458971 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.810780048 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.810822010 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.811105967 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.811285019 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.811300993 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.871459007 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.872529984 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.872555017 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.873199940 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.873209953 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.930824995 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.931076050 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.973623037 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.973720074 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.973773956 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.974065065 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.974087954 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.974101067 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.974107981 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.977478981 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.977576971 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.977713108 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.977902889 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:43.977938890 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:43.983302116 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.983330965 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.984482050 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.984564066 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.985439062 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.985515118 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:43.985681057 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:43.985692978 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:44.251133919 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:44.251228094 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:44.251636982 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:44.251697063 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:44.251750946 CEST	443	49775	23.1.237.91	192.168.2.5
Oct 10, 2024 12:49:44.251825094 CEST	49775	443	192.168.2.5	23.1.237.91
Oct 10, 2024 12:49:44.357536077 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.358192921 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.358278036 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.359849930 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.359867096 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.449975967 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.450625896 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.450655937 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.450679064 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.451375961 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.451431036 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.456363916 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.456507921 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.456593037 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.478895903 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.479002953 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.479074955 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.479113102 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.479132891 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.481271982 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.481300116 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.482098103 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.482103109 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.484069109 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.484090090 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.484649897 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.484656096 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.487221956 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.487309933 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.487417936 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.487572908 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.487596035 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.549850941 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.550002098 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.550162077 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.550384998 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.550409079 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.550424099 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.550431967 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.554362059 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.554425001 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.554513931 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.554676056 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.554696083 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580297947 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580388069 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580456972 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.580697060 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.580714941 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580759048 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580892086 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.580941916 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.582242966 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.582258940 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.582269907 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.582274914 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.585083008 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.585109949 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.585257053 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.585969925 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.585987091 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.586990118 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.587043047 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.587162971 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.587265015 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.587284088 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.644254923 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.644726038 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.644804955 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.646159887 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.646173954 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.746203899 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.746344090 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.746416092 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.746606112 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.746642113 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.746668100 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.746682882 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.750560045 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.750623941 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.750695944 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.750988960 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:44.751005888 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:44.862740993 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:44.862847090 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:44.862930059 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:44.863202095 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:44.863238096 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.196609020 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.197210073 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.197257996 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.197655916 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.197669029 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.298634052 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.298765898 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.298839092 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.299042940 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.299078941 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.299104929 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.299118996 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.302119017 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.302155972 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.302329063 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.302505016 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.302516937 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.379455090 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.380022049 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.380068064 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.380108118 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.380482912 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.380512953 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.380553961 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.380562067 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.380889893 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.380896091 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.388494015 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.388813972 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.388825893 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.389152050 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.389157057 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.414179087 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.414484024 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.414500952 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.414834023 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.414839029 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.459481955 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.459515095 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:45.459620953 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.459739923 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.459750891 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:45.459805965 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.459969044 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.459983110 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:45.460136890 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:45.460150957 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:45.478697062 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.478842974 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.478984118 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479041100 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479064941 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.479084969 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479091883 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.479185104 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.479294062 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.479362965 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479456902 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479477882 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.479510069 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.479516983 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.482161045 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482187986 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.482222080 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482247114 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482271910 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.482379913 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482386112 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482394934 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.482465982 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.482484102 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.491370916 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.491544962 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.491646051 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.495096922 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.495115995 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.498991966 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.499051094 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.499142885 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.499277115 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.499295950 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.517452955 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.517632008 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.517710924 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.517776966 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.517791986 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.517803907 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.517808914 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.520668030 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.520721912 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.520823002 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.520952940 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.520971060 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.524950981 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.525274038 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.525321007 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.525839090 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.526137114 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.526231050 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.526309967 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.526360035 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.526372910 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.855154991 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.855539083 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.855715990 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.940171003 CEST	49787	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:45.940244913 CEST	443	49787	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:45.968980074 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:45.969077110 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:45.969188929 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:45.969407082 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:45.969434977 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:45.980374098 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.980927944 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.980948925 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:45.981415033 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:45.981426001 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.086309910 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.086456060 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.086528063 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.086745024 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.086765051 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.086775064 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.086780071 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.089905024 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.089999914 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.090095997 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.090240002 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.090262890 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.096716881 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.097282887 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.097302914 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.097826004 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.097907066 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.098823071 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.098891020 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.099956989 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.100040913 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.100146055 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.100157022 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.123920918 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.124469042 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.124547958 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.125220060 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.125235081 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.134927988 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.135366917 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.135401011 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.135762930 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.135771036 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.144148111 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.144671917 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.147653103 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.147667885 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.148149967 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.148154020 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.162034035 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.162626028 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.162646055 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.163439035 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.163444996 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.216625929 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.217029095 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.217055082 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.217639923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.217720032 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.218647957 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.218708992 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.219014883 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.219096899 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.223897934 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.224060059 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.224178076 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.224529028 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.224580050 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.224613905 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.224630117 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.228389025 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.228425980 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.228581905 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.228813887 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.228825092 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.235374928 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.235553980 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.235740900 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.235830069 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.235848904 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.235862017 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.235867977 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.241072893 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.241101980 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.241164923 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.241293907 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.241305113 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.248608112 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.248760939 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.248822927 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.248866081 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.248886108 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.248903036 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.248908997 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.254152060 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.254245996 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.254369020 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.254482985 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.254508972 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.260308981 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.260481119 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.260541916 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.260567904 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.260580063 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.260595083 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.260600090 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.263484955 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.263516903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.264106035 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.264159918 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.264244080 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.264410019 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.264427900 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.316104889 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.441505909 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.441612959 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.441734076 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.442015886 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.442035913 CEST	443	49789	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.442044973 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.442217112 CEST	49789	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.444032907 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.491408110 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.847157955 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.847755909 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.847829103 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.848268032 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.848282099 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.849159002 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.849505901 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.849519968 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.850042105 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.850116968 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.851042986 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.851103067 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.851254940 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.851339102 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.851470947 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.851485968 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:46.876475096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.876590014 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.876609087 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.876631975 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.876676083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.876725912 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.876733065 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.876773119 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.882164001 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.882236004 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.882246971 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.882294893 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.888554096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.888637066 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.888673067 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.888676882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.889178038 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.894679070 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.894758940 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.895176888 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:46.901243925 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.901315928 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.901360035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.901418924 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.946161032 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.946239948 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.946307898 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.946542978 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.946579933 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.946605921 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.946619987 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.949836016 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.949930906 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.950062990 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.950274944 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:46.950305939 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:46.961986065 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.962069035 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.962107897 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.962158918 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.968633890 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.968689919 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.968874931 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.968919039 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.971843958 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.971900940 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.971963882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.972012997 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.977786064 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.977844954 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.977871895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.977921963 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.984149933 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.984208107 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.984231949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.984282970 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.990308046 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.990367889 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.990390062 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.996596098 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:46.996653080 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:46.996659040 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.004321098 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.004383087 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.004388094 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.008986950 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.009046078 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.009051085 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.014489889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.014564037 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.014569044 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.020199060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.020327091 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.020332098 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.025994062 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.026052952 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.026058912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.031850100 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.031904936 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.031908989 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.031972885 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.033143997 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.033174992 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.033839941 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.033845901 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.034112930 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.034519911 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.034531116 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.034945965 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.034950972 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.040352106 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.040705919 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.040739059 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.041105986 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.041115999 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.054483891 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.054575920 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.054609060 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.054625034 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.054681063 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.054686069 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.060983896 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.061043978 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.061049938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.061188936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.061290979 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.061291933 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.061320066 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.061368942 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.061398029 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.065747023 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.065813065 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.065818071 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.070374012 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.070449114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.070472956 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.070477962 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.070517063 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.075058937 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.079368114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.079421043 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.079426050 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.083631992 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.083688974 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.083693981 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.088270903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.088351011 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.088422060 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.088428020 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.088790894 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.092467070 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.096782923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.096863985 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.096920013 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.096925974 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.096993923 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.101185083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.105494022 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.105545998 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.105551958 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.105581999 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.106517076 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.106600046 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.107026100 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.107042074 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.109575987 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.109620094 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.109651089 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.109657049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.109715939 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.113500118 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.117582083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.117638111 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.117641926 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.121329069 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.121382952 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.121387959 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.124878883 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.124914885 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.124931097 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.124936104 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.124975920 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.128586054 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.131634951 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.131805897 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.131916046 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.131931067 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:47.131958961 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.131958961 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.131983995 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.131994963 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.132042885 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:47.132064104 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.132097960 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:47.132119894 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.132123947 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.132126093 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:47.133671999 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.133829117 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.133893967 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.134074926 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.134094954 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.134105921 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.134113073 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.134182930 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:47.134278059 CEST	443	49795	172.217.16.206	192.168.2.5
Oct 10, 2024 12:49:47.134334087 CEST	49795	443	192.168.2.5	172.217.16.206
Oct 10, 2024 12:49:47.135554075 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.135608912 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.135613918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.137130976 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137178898 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.137258053 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137413025 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137413025 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137423992 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.137443066 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.137494087 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137558937 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.137569904 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.143503904 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.143630028 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.143693924 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.143755913 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.143775940 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.143789053 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.143795013 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.145934105 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.145941973 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.146003962 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.146116972 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.146126032 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.148720980 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.148787975 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.148802042 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.148865938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.148942947 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.148993015 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.148998976 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.149035931 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.153301001 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.153533936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.153588057 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.153593063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.153677940 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.153728008 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.153733015 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.154335022 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.154386044 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.154390097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.154763937 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.154860020 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.154911041 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.154916048 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.155024052 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.155170918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.155502081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.155553102 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.155558109 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.157645941 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.157713890 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.157718897 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.159115076 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.159210920 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.159214973 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.162607908 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.162658930 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.162663937 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.163336039 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.163402081 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.163407087 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.167309046 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.167371035 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.167376041 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.167582035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.167630911 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.167635918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.171617985 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.171681881 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.171686888 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.171760082 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.171812057 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.171817064 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.176110029 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.176165104 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.176170111 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.176256895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.176305056 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.176311016 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.180471897 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.180560112 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.180566072 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.180660963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.180706024 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.180710077 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.184688091 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.184767962 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.184767962 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.184793949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.184839964 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.184870958 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.189153910 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.189215899 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.189222097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.189300060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.189353943 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.189357996 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.193665028 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.193718910 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.193723917 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.193815947 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.193866968 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.193871975 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198133945 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198219061 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198273897 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.198280096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198364973 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198415041 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.198419094 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.198457003 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.198460102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.202068090 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.202131987 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.202136040 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206043959 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206104040 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.206109047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206213951 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206293106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206325054 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.206330061 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.206470966 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.209863901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.210031986 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.210112095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.210164070 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.210169077 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.210297108 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.213716984 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.213861942 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.213915110 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.213918924 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217245102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217325926 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.217330933 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217353106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217426062 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.217454910 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217597008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.217644930 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.217649937 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.221024990 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.221079111 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.221082926 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.221170902 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.221431971 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.221436977 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.224580050 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.224664927 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.224692106 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.224698067 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.224739075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.224750996 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.229123116 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.229201078 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.229207039 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.229275942 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.229491949 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.229496956 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.239921093 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.239980936 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.239993095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.240071058 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.240297079 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.240302086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.245862961 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.245923042 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.245928049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246021032 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246072054 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.246077061 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246198893 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246278048 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.246282101 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246310949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246407986 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.246427059 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246588945 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246651888 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.246656895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246743917 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246939898 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.246958971 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.246968985 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.247330904 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.247515917 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.247695923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.247766018 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.247771025 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.247845888 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.247915983 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.247920036 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251552105 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251601934 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.251606941 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251718998 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251770020 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.251775026 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251867056 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.251924992 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.251929045 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.259994984 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.260046959 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.260051966 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.260164022 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.260217905 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.260222912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.260312080 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.260360003 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.260365009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264086008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264147997 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.264153004 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264261961 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264343977 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264396906 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.264401913 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.264446020 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.264450073 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268547058 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268603086 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.268609047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268702030 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268747091 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.268750906 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268846035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268937111 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.268980980 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.268985033 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.269021034 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.277009010 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:47.277045012 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:47.277096987 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:47.277136087 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.277335882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.277383089 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.277388096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.277477980 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.277539015 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.277544022 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.277755022 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:47.277774096 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:47.281985998 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.282063007 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.282067060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.282143116 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.282197952 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.282202005 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.282293081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.282341003 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.282345057 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.290684938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.290740967 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.290745020 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.290837049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.290889978 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.290894985 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.290982008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.291095018 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.291100025 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294543982 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294611931 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.294615984 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294689894 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294737101 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.294742107 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294843912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.294893026 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.294897079 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.302514076 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.302577019 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.302582026 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.302665949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.302712917 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.302716970 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.302809000 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.303143978 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.303148031 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306237936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306308031 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.306312084 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306408882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306452990 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.306457043 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306548119 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.306596041 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.306601048 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313476086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313532114 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.313536882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313625097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313671112 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.313674927 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313903093 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.313947916 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.313951969 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.316991091 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.317042112 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.317047119 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.317133904 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.317181110 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.317184925 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.317828894 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.317905903 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.317910910 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.331758022 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.331830978 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.331840038 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.331859112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.331907034 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.331944942 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.332129002 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.332182884 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.332187891 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338423967 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338478088 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.338483095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338581085 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338665962 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338712931 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.338717937 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338788986 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.338792086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338866949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.338916063 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.338921070 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.339293957 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.339354992 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.339359045 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.339874983 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.339936018 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.339940071 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340050936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340100050 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.340105057 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340198994 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340281010 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340292931 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.340303898 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.340353966 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.340387106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344115019 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344201088 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344238997 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.344244003 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344347000 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344396114 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.344400883 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.344440937 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.352351904 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.352516890 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.352564096 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.352569103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.352673054 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.352725983 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.352730989 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356487989 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356539011 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.356544018 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356650114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356704950 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.356709003 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356800079 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.356844902 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.356848955 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.364444971 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.364625931 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.364736080 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.366799116 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.366832018 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.366880894 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.366894960 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.369529009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.369574070 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.369594097 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.369599104 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.369638920 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.369642019 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.369751930 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.369797945 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.369802952 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370037079 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370115042 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370162010 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.370167017 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370265961 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370284081 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.370287895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.370338917 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.370349884 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374480963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374582052 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.374583960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374607086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374661922 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.374695063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374840975 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.374896049 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.374900103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.386866093 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.386913061 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.386923075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.386926889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.386965990 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.386969090 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387048960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387094021 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.387098074 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387175083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387222052 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.387226105 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387305021 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387356997 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.387361050 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387470007 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.387546062 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.387550116 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.390398026 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.390467882 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.390556097 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.394743919 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.394794941 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.395092964 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.395158052 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.395164967 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.395169973 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.395214081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.395215988 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.395224094 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.395267010 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.395271063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.398647070 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.398736954 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.398744106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.398763895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.398830891 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.398840904 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.398982048 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.399029016 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.399034023 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409499884 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409557104 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.409570932 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409648895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409693003 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.409698009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409807920 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409862041 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.409866095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409938097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.409991980 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.409996033 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.410140038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.410238981 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.410286903 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.410291910 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.410516977 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.410521030 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424249887 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424304008 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.424309015 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424395084 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424441099 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.424446106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424536943 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.424581051 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.424586058 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.430845976 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.430923939 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.430937052 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.430957079 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431018114 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.431039095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431205988 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431288004 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431335926 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.431340933 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431377888 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.431387901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431536913 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431616068 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.431662083 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.431668043 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.432037115 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.436394930 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436577082 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436625004 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.436630011 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436722040 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436769009 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.436773062 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436861038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.436907053 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.436912060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445178986 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445261002 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445317030 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.445322037 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445417881 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445465088 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.445468903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445502043 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.445506096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445626020 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445669889 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.445674896 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445769072 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445849895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445899010 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.445904016 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.445951939 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.448946953 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.449115038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.449168921 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.449173927 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.449263096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.449331999 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.449336052 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462150097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462208986 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.462217093 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462347031 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462431908 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.462436914 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462459087 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462573051 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.462578058 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462671041 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462743044 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.462747097 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462820053 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462901115 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.462941885 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.462948084 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.463036060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.463098049 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.463103056 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.463143110 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.466757059 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.466905117 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.466958046 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.466963053 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.467051983 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.467128992 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.467181921 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.467186928 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.467405081 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.479532003 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.479700089 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.479763031 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.479768038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.479845047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.479895115 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.479898930 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.479995012 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.480092049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.480139971 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.480144024 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.480241060 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.480287075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.480290890 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.480325937 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.480329037 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487353086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487402916 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.487406969 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487435102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487469912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487487078 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.487492085 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.487586975 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.487591028 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.490989923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.491040945 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.491045952 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.491139889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.491198063 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.491202116 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.491287947 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.491353035 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.491358042 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502011061 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502079964 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.502084970 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502163887 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502218962 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.502223015 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502311945 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502357006 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.502362013 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502450943 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502496004 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.502501011 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502928972 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.502985954 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.502990961 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.503066063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.503196955 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.503201008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.516902924 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.516990900 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.516993046 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.517013073 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.517057896 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.517096043 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.517231941 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.517278910 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.517283916 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523356915 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523413897 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.523418903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523528099 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523578882 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.523582935 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523682117 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523845911 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.523895025 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.523900032 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.524127960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.524154902 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.524159908 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.524270058 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.524274111 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.524339914 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.524389029 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.524394035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.528851986 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.528903961 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.528908968 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.528995991 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.529043913 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.529047966 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.529131889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.529181004 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.529185057 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.537776947 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.537866116 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.537870884 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.537952900 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538063049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538085938 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.538090944 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538178921 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.538182974 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538302898 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538384914 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.538389921 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538409948 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538460016 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.538494110 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538630009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.538677931 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.538682938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.541693926 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.541749954 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.541754007 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.541860104 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.541907072 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.541910887 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.554811001 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.554877996 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.554883003 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.554966927 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555053949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555114031 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.555119038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555202961 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555252075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.555255890 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555294991 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.555298090 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555433035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555478096 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.555483103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555573940 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.555619955 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.555624008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559416056 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559501886 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.559506893 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559591055 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559638977 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.559643984 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559750080 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559832096 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.559879065 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.559884071 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.561177969 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.579204082 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579363108 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579463005 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579519033 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.579524040 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579619884 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579698086 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.579703093 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579755068 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.579758883 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579850912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.579920053 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.579924107 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580020905 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580099106 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.580102921 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580194950 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580280066 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580329895 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.580334902 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580394030 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.580396891 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580720901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580893040 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.580943108 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.580948114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.581171036 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.583566904 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.583738089 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.583945990 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.584017992 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.584022999 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.584106922 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.584181070 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.584184885 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.585367918 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.585371971 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.585557938 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.594419956 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.594564915 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.594660997 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.594665051 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.594747066 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.594801903 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.594805956 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.594892025 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.595000982 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.595005989 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.595099926 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.595172882 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.595177889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.595365047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.595611095 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.595616102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609510899 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609596014 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.609600067 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609683037 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609767914 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.609772921 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609793901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.609927893 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.609932899 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.615781069 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.615848064 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.615853071 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.615953922 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616039038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616065979 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.616071939 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616173983 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.616178036 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616534948 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616585016 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.616590023 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616683960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616729975 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.616734982 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.616952896 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.617010117 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.617014885 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621454954 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621506929 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.621511936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621604919 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621651888 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.621655941 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621767044 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.621967077 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.621970892 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.623769999 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.631359100 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631455898 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.631459951 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631546021 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631635904 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631681919 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.631685972 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631797075 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631820917 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.631824970 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.631889105 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.631892920 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.632028103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.632072926 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.632076979 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.632198095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.632375002 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.632380009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634169102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634219885 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.634224892 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634324074 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634372950 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.634377956 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634481907 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.634536982 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.634541988 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647484064 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647541046 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.647545099 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647660017 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647747993 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647794962 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.647799969 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647886992 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.647890091 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.647988081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.648032904 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.648036957 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.648406029 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.648456097 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.648459911 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.648557901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.648608923 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.648612976 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.652162075 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.652231932 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.652236938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.652302027 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.652353048 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.652357101 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.665846109 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.668822050 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:47.670965910 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.670996904 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.672954082 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.672966957 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.673914909 CEST	53	65165	1.1.1.1	192.168.2.5
Oct 10, 2024 12:49:47.674006939 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:47.674474955 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:47.675272942 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.675277948 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.675334930 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.675568104 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.675729036 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.675813913 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.675863028 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.675868988 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.675908089 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.675911903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676048994 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676141024 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676192999 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.676198006 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676296949 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676342964 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.676347017 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676383018 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.676397085 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676547050 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676594019 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.676599026 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676702023 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.676760912 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.676764965 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.679166079 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.679230928 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.679235935 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.679250956 CEST	53	65165	1.1.1.1	192.168.2.5
Oct 10, 2024 12:49:47.684355974 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684457064 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684493065 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.684498072 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684559107 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.684565067 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684686899 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684771061 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.684779882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684806108 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.684854031 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.687191963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688270092 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688313007 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688321114 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.688325882 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688361883 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.688365936 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688404083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688441038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688477039 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688481092 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.688488960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688525915 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.688529968 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.688565016 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.688568115 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.692004919 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.692008018 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.692097902 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.702162981 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702279091 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702322960 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.702327013 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702377081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702426910 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702430010 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.702441931 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.702483892 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.708484888 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708650112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708738089 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708781958 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.708786964 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708883047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708929062 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.708934069 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.708981991 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.709006071 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.709160089 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.709218025 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.709222078 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.709316969 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.709538937 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.709543943 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714087963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714164972 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.714169025 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714262962 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714338064 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.714342117 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714421988 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.714477062 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.714481115 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.722875118 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.722937107 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.722942114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723056078 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723109007 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.723114014 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723229885 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723279953 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.723284006 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723402977 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723468065 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.723472118 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.723953009 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.724003077 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.724008083 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.724106073 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.724442959 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.724447966 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.739841938 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.739917040 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.739923954 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740004063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740088940 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740112066 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740117073 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740158081 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740179062 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740361929 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740407944 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740411997 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740519047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740566969 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740572929 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740672112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740753889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740801096 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740806103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.740845919 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.740849972 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.741096973 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.741139889 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.741143942 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.741255045 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.741301060 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.741306067 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.744740963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.744827032 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.744826078 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.744851112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.744904041 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.744935989 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.745100975 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.745148897 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.745152950 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768121958 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768218994 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768255949 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.768260956 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768368959 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768383980 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.768388987 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768459082 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.768462896 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768587112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768632889 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.768637896 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.768974066 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769025087 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.769028902 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769140005 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769229889 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769278049 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.769284010 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769387960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769437075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.769443035 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769490004 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.769494057 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769885063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.769929886 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.769933939 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.770045042 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.770090103 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.770093918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.770205021 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.770256996 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.770262957 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.774880886 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.774950981 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.775126934 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.775403976 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.775403976 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.775454044 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.775480986 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.777730942 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.779485941 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.779536963 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.779597998 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.779661894 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.779675007 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.779675961 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.779697895 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.779779911 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.779784918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.779928923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.779930115 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.779990911 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.779995918 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780081987 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780179024 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.780179977 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780200958 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780231953 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.780246973 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.780250072 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.780289888 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780436993 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780524969 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780597925 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.780602932 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.780641079 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.781456947 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.781464100 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.781722069 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.781754971 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.784076929 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.784101009 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.784744978 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.784750938 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.794604063 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.794768095 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.794827938 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.794832945 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.794917107 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.794992924 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.794996977 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.800848007 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.800906897 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.800911903 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801011086 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801098108 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801116943 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.801120996 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801172972 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.801184893 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801372051 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801420927 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.801425934 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801520109 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801719904 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801770926 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.801775932 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.801831007 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.801834106 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.806643963 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.806706905 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.806711912 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.806802034 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.806893110 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.806941032 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.806946039 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.807040930 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.807041883 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.807063103 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.807255030 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.815475941 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.815658092 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.815715075 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.815720081 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.815823078 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.815912008 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.815954924 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.815959930 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.816035032 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.816052914 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.816225052 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.816272020 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.816277027 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.816416979 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.816459894 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.816464901 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.825354099 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.832156897 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832200050 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832221985 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.832226038 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832262039 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832263947 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.832273960 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832313061 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.832317114 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832921028 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832967043 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.832977057 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.832981110 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.833013058 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.833015919 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.833075047 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.833169937 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.833174944 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.837321997 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.837373018 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.837393045 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.837398052 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.837439060 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.837455988 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.861143112 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.861166954 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.861212015 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.861218929 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.861260891 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.862246990 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.862273932 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.862320900 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.862327099 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.862354994 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.872867107 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.872894049 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.872925043 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.872935057 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.872965097 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.874742031 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.876564026 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.876642942 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.876686096 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.879801989 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.879941940 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.880110979 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.893657923 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.893685102 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.893752098 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.893769026 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.893789053 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.899308920 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.899336100 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.899368048 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.899380922 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.899427891 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.908516884 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.908587933 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.908596039 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.908617020 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.908649921 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.908658981 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.908803940 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.908884048 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.908983946 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.963495970 CEST	49790	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:47.963514090 CEST	443	49790	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:47.978660107 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.978667974 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.979933977 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.979937077 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.980474949 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.980487108 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.980520010 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.980525017 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.985780954 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.985797882 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.985940933 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.986206055 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.986215115 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.987160921 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.987173080 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:47.987219095 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:47.987226963 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.033076048 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.033463001 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.033545017 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.034269094 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.034295082 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.034461975 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.034461975 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.034527063 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.034651995 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.035289049 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.059269905 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.076361895 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.081526995 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.081696033 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.081779003 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.109183073 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.121999979 CEST	53	65165	1.1.1.1	192.168.2.5
Oct 10, 2024 12:49:48.172646999 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:48.179338932 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.179622889 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.179765940 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.223445892 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.231475115 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.231512070 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.279484987 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.364703894 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.364892006 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.365156889 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.413815975 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.413865089 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.413939953 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.419406891 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.419444084 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.419512033 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.442161083 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.490442991 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.491791010 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.491818905 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.492382050 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.492407084 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.525898933 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.525937080 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:48.526038885 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.549969912 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.549993038 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:48.601066113 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.601157904 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:48.601406097 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.602358103 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:48.602396965 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:48.626526117 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.670237064 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.675693989 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.675786972 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.675892115 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.676204920 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.676243067 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.680877924 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.680918932 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.680982113 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.683288097 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.683314085 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.683377028 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.686036110 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.686048985 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.686484098 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:48.686505079 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:48.713041067 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:48.713069916 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:48.713134050 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:48.714363098 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:48.714378119 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:48.731838942 CEST	49812	443	192.168.2.5	142.250.185.97
Oct 10, 2024 12:49:48.731909037 CEST	443	49812	142.250.185.97	192.168.2.5
Oct 10, 2024 12:49:48.735368967 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.735373974 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.736531973 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.736536980 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.737227917 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.737303019 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.738080978 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.738095999 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.738250017 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.738255978 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.738265991 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.738270998 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.744434118 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.744451046 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.744808912 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.744816065 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.746129990 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:48.751084089 CEST	53	65165	1.1.1.1	192.168.2.5
Oct 10, 2024 12:49:48.751178980 CEST	65165	53	192.168.2.5	1.1.1.1
Oct 10, 2024 12:49:48.755069017 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.755084991 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.755142927 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.755423069 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.755436897 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.756153107 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.756238937 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.756362915 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.756488085 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.756510973 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.832433939 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.832534075 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.832587004 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.832746983 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.832760096 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.832772017 CEST	65173	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.832776070 CEST	443	65173	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.835549116 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.835581064 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.835671902 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.835987091 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.835999966 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.837362051 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.837567091 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.837661028 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.837661028 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.837740898 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.837779045 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.839402914 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.839422941 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.839519024 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.839651108 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.839663982 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.843487978 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.843791008 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.843852043 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.843888044 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.843888044 CEST	65171	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.843905926 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.843915939 CEST	443	65171	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.845765114 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.845782042 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:48.845839024 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.845937967 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:48.845951080 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.136858940 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.137135029 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.137151003 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.137706041 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.138164997 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.138245106 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.138386965 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.179429054 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.188824892 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.189136982 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.189155102 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.189476967 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.189909935 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.189964056 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.190200090 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.190222979 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.190223932 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.231400013 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.248941898 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.249367952 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.292655945 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.292817116 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.304666996 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.322103977 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.344831944 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.364583015 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.368089914 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:49.387880087 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.387984037 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.388044119 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.409969091 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.422424078 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.426558971 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.433588982 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.435576916 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.436031103 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.436103106 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.453222990 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.466414928 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.474701881 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.486999035 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.507180929 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.522464991 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.522548914 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.523437977 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.523494005 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.523804903 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.523828983 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.524139881 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.524182081 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.524452925 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.524707079 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.524786949 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.525962114 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.526027918 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.528095007 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.528181076 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.528558016 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.529578924 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.529675007 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.532136917 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.532207012 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.537816048 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.537821054 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:49.539155006 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:49.560183048 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.575659037 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.575673103 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.575761080 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.590328932 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.686892033 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.686929941 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.687299013 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.687349081 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.687932014 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.687990904 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.690826893 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.690888882 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.692831993 CEST	65175	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.692845106 CEST	443	65175	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.695255041 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.695636034 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.696193933 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.696540117 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.708345890 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.708534956 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.709110022 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.709305048 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.711343050 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.711587906 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:49.718029022 CEST	65176	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.718054056 CEST	443	65176	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.729108095 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.729136944 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.729201078 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.736072063 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.736089945 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.736182928 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.751734972 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.751753092 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.751754045 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.751763105 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.751869917 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.751933098 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.773674965 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.774554968 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.774569988 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.775376081 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.775377035 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:49.775520086 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:49.775583982 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.775783062 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.776498079 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.777828932 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:49.804989100 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.805001974 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.806154013 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.806159019 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.806883097 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.806895018 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.807589054 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.807594061 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.808160067 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.808208942 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.809361935 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.809375048 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.810553074 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.810571909 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.811347008 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.811352015 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.811811924 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.811825991 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.812391043 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.812395096 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.815419912 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.819396973 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.819406986 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.819442987 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:49.819480896 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.827289104 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:49.827308893 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:49.827358007 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:49.827965975 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:49.827975988 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:49.907097101 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.907336950 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.907556057 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.907587051 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.907650948 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.907955885 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.907972097 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908040047 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908050060 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908097982 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908133984 CEST	65191	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908138990 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908149958 CEST	443	65191	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908329964 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908348083 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908356905 CEST	65194	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908361912 CEST	443	65194	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908920050 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908924103 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.908945084 CEST	65193	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.908947945 CEST	443	65193	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.910718918 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.910885096 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.911169052 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.911973000 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.912791014 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.912863970 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.916484118 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.916496992 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.916507006 CEST	65192	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.916516066 CEST	443	65192	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.918600082 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.918621063 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.918634892 CEST	65190	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.918642998 CEST	443	65190	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.925657034 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.925681114 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.925985098 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.928316116 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.928409100 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.928498030 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.928977013 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.929024935 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.929049969 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.929075003 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.929147959 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.930529118 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.930538893 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.930648088 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.930859089 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.930874109 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.932388067 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.932429075 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.932550907 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.932734966 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.932750940 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.933006048 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.933039904 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.933278084 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:49.933290958 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:49.986485958 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.986517906 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.986668110 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.986805916 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.986845970 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.986974001 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.988161087 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.988837957 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.989099979 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:49.991852045 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.991931915 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:49.991995096 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.020246983 CEST	65174	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.020256996 CEST	443	65174	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.021127939 CEST	65179	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.021142960 CEST	443	65179	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.021713972 CEST	65178	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.021780968 CEST	443	65178	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.022802114 CEST	65180	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.022810936 CEST	443	65180	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.026535988 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.026557922 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.026650906 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.027895927 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.027904987 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.027961016 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.029427052 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.029516935 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.029591084 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.030459881 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.030479908 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.030766964 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.033488035 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.033500910 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.033900976 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.033914089 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.034528971 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.034565926 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.034708023 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.034718037 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.047372103 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:50.048206091 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:50.048269033 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:50.071858883 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.071882010 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.071940899 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.086602926 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:50.086973906 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:50.087357044 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:50.091131926 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.091150045 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.109882116 CEST	65177	443	192.168.2.5	142.250.185.78
Oct 10, 2024 12:49:50.109946966 CEST	443	65177	142.250.185.78	192.168.2.5
Oct 10, 2024 12:49:50.118093967 CEST	65181	443	192.168.2.5	142.250.185.68
Oct 10, 2024 12:49:50.118108988 CEST	443	65181	142.250.185.68	192.168.2.5
Oct 10, 2024 12:49:50.411842108 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.412966013 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.412986040 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.414299011 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.416941881 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.417038918 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.417156935 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.417315960 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.417377949 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.473963022 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:50.474148989 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:50.474208117 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:50.475888968 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:50.475980043 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:50.564393044 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.565037012 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.565056086 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.565489054 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.565495014 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.583525896 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.584065914 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.584083080 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.584500074 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.584505081 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.586668968 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.586797953 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.587172985 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.587261915 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.587476015 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.587491035 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.587766886 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.587799072 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.588161945 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.588172913 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.614805937 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.615164042 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.615201950 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.615482092 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.615488052 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.664771080 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.668641090 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.668699026 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.668803930 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.673710108 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.681263924 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.681407928 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.681520939 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.687647104 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.687659979 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.687763929 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.687798977 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.687995911 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.687995911 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.696813107 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.697129011 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.706058025 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.708328009 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.708353043 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.708367109 CEST	65200	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.708374977 CEST	443	65200	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.709733009 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.709733009 CEST	65201	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.709808111 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.709845066 CEST	443	65201	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.709928989 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.709928989 CEST	65203	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.709939003 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.709949017 CEST	443	65203	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.710170984 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.710170984 CEST	65202	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.710189104 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.710211039 CEST	443	65202	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.713470936 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.713491917 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.713546038 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.713557005 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.714445114 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.714514971 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.714728117 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.714735985 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.715040922 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.715112925 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.715318918 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.716120958 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.716193914 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.716420889 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.716974020 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.716995001 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.717150927 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.717365980 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.717376947 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.717432976 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.717437029 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.717571020 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.717585087 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.717621088 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.717648029 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.717984915 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.718041897 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.718539000 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.718686104 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.719295979 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.719392061 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.719768047 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.719971895 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.728739023 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.728862047 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.745857954 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.747190952 CEST	65196	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.747208118 CEST	443	65196	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.759846926 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.759846926 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.759861946 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.759862900 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.774738073 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.774914980 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.774977922 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.781266928 CEST	65215	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.781305075 CEST	443	65215	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.781369925 CEST	65215	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.782615900 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.782639027 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.783320904 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.783348083 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.783411980 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.783629894 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.783636093 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.783755064 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.783801079 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.783807039 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.783885002 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784048080 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784105062 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.784399986 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.784447908 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784513950 CEST	65215	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784524918 CEST	443	65215	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.784694910 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784694910 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.784754038 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.785449028 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.785480976 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.785486937 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.785497904 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.785715103 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.785957098 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.786098957 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.786123037 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.786135912 CEST	65204	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.786144018 CEST	443	65204	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.794404030 CEST	65216	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.794425964 CEST	443	65216	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.794670105 CEST	65216	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.795761108 CEST	65217	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.795772076 CEST	443	65217	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.795886993 CEST	65217	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.796641111 CEST	65218	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.796648026 CEST	443	65218	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.796905994 CEST	65218	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.797760010 CEST	65219	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.797775030 CEST	443	65219	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.797852993 CEST	65219	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.798631907 CEST	65220	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.798656940 CEST	443	65220	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.798727036 CEST	65220	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.798877954 CEST	65219	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.798892975 CEST	443	65219	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.799186945 CEST	65216	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.799201965 CEST	443	65216	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.799403906 CEST	65217	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.799405098 CEST	65220	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.799413919 CEST	443	65217	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.799420118 CEST	443	65220	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.799626112 CEST	65218	443	192.168.2.5	13.107.246.45
Oct 10, 2024 12:49:50.799637079 CEST	443	65218	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:50.829066038 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:50.829077959 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:50.877088070 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.050781012 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.051635027 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.051702023 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.055471897 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.055635929 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.059655905 CEST	65209	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.059674978 CEST	443	65209	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.060832977 CEST	65221	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.060867071 CEST	443	65221	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.061539888 CEST	65221	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.061939955 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.061959028 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.062418938 CEST	65221	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.062434912 CEST	443	65221	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.082367897 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.082892895 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.083065033 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.083441973 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.084289074 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.084343910 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.088315010 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.088644028 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.088706970 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.089812994 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.090142965 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.090219021 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.115436077 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.156456947 CEST	65207	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.156523943 CEST	443	65207	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.157053947 CEST	65205	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.157075882 CEST	443	65205	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.158169031 CEST	65206	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.158175945 CEST	443	65206	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.159301996 CEST	65208	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.159331083 CEST	443	65208	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.164207935 CEST	65227	443	192.168.2.5	142.250.186.33
Oct 10, 2024 12:49:51.164227962 CEST	443	65227	142.250.186.33	192.168.2.5
Oct 10, 2024 12:49:51.164278984 CEST	65227	443	192.168.2.5	142.250.186.33
Oct 10, 2024 12:49:51.167787075 CEST	65228	443	192.168.2.5	142.250.184.238
Oct 10, 2024 12:49:51.167799950 CEST	443	65228	142.250.184.238	192.168.2.5
Oct 10, 2024 12:49:51.167993069 CEST	65228	443	192.168.2.5	142.250.184.238
Oct 10, 2024 12:49:51.168934107 CEST	65227	443	192.168.2.5	142.250.186.33
Oct 10, 2024 12:49:51.168946981 CEST	443	65227	142.250.186.33	192.168.2.5
Oct 10, 2024 12:49:51.169327974 CEST	65228	443	192.168.2.5	142.250.184.238
Oct 10, 2024 12:49:51.169339895 CEST	443	65228	142.250.184.238	192.168.2.5
Oct 10, 2024 12:49:51.242743015 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.242856026 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.242944002 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.242971897 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.242990017 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.243046999 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.243053913 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.243154049 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.243207932 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.243215084 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.248362064 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.248424053 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.248433113 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.254720926 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.254795074 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.254803896 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.261086941 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.261145115 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.261152983 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.305891037 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.328912973 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.331969976 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.332031965 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.332043886 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.332075119 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.332119942 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.338279009 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.344362020 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.344413996 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.344424963 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.350855112 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.350907087 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.350915909 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.357183933 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.357237101 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.357247114 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.363496065 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.363555908 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.363565922 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.369281054 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.369333029 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.369339943 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.375174999 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.375225067 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.375232935 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.381192923 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.381246090 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.381254911 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.387098074 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.387151003 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.387160063 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.392980099 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.393035889 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.393043041 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.399171114 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.399224043 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.399233103 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.415877104 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.415930986 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.415937901 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.417995930 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.418047905 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.418056011 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.418534040 CEST	443	65215	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.422764063 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.422822952 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.422830105 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.426920891 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.426968098 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.426976919 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.428512096 CEST	443	65219	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:51.430325031 CEST	443	65217	13.107.246.45	192.168.2.5
Oct 10, 2024 12:49:51.431070089 CEST	65215	443	192.168.2.5	142.250.185.142
Oct 10, 2024 12:49:51.431087017 CEST	443	65215	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.431427956 CEST	443	65215	142.250.185.142	192.168.2.5
Oct 10, 2024 12:49:51.431552887 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.431603909 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.431616068 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.431704044 CEST	443	65199	142.250.185.110	192.168.2.5
Oct 10, 2024 12:49:51.431754112 CEST	65199	443	192.168.2.5	142.250.185.110
Oct 10, 2024 12:49:51.431761980 CEST	443	65199	142.250.185.110	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 12:49:26.318387032 CEST	192.168.2.5	1.1.1.1	0x4d74	Standard query (0)	gmail.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:26.318526030 CEST	192.168.2.5	1.1.1.1	0xdf1b	Standard query (0)	gmail.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:26.966996908 CEST	192.168.2.5	1.1.1.1	0xce94	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:26.966996908 CEST	192.168.2.5	1.1.1.1	0x1c34	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:29.735415936 CEST	192.168.2.5	1.1.1.1	0x28be	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:29.735415936 CEST	192.168.2.5	1.1.1.1	0xc8b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:35.785793066 CEST	192.168.2.5	1.1.1.1	0x4069	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:35.785793066 CEST	192.168.2.5	1.1.1.1	0x8c2d	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:37.525311947 CEST	192.168.2.5	1.1.1.1	0xc331	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:37.526101112 CEST	192.168.2.5	1.1.1.1	0xe70f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:40.442929029 CEST	192.168.2.5	1.1.1.1	0x61d0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:40.444097996 CEST	192.168.2.5	1.1.1.1	0xe0c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:42.467614889 CEST	192.168.2.5	1.1.1.1	0x6611	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:42.467696905 CEST	192.168.2.5	1.1.1.1	0x3113	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:45.446240902 CEST	192.168.2.5	1.1.1.1	0x6842	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:45.446774006 CEST	192.168.2.5	1.1.1.1	0x6e73	Standard query (0)	support.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:47.269280910 CEST	192.168.2.5	1.1.1.1	0xb186	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:47.269443035 CEST	192.168.2.5	1.1.1.1	0x87f4	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:49.818475962 CEST	192.168.2.5	1.1.1.1	0x879e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:49.819178104 CEST	192.168.2.5	1.1.1.1	0x6c3d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:51.132143021 CEST	192.168.2.5	1.1.1.1	0x28a8	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:51.132627964 CEST	192.168.2.5	1.1.1.1	0x9116	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:51.155793905 CEST	192.168.2.5	1.1.1.1	0x14ac	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:51.155967951 CEST	192.168.2.5	1.1.1.1	0x1b85	Standard query (0)	support.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:49:52.855247974 CEST	192.168.2.5	1.1.1.1	0x98d5	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:52.855462074 CEST	192.168.2.5	1.1.1.1	0x4afb	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:00.488774061 CEST	192.168.2.5	1.1.1.1	0xf376	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:00.489042044 CEST	192.168.2.5	1.1.1.1	0x920a	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:02.717284918 CEST	192.168.2.5	1.1.1.1	0x86c4	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:02.717504025 CEST	192.168.2.5	1.1.1.1	0x350d	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:39.041095972 CEST	192.168.2.5	1.1.1.1	0x97ec	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:39.041095972 CEST	192.168.2.5	1.1.1.1	0x2ffd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:40.953650951 CEST	192.168.2.5	1.1.1.1	0xa1f5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:40.953960896 CEST	192.168.2.5	1.1.1.1	0x3a7e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:48.787338972 CEST	192.168.2.5	1.1.1.1	0x3028	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:48.787563086 CEST	192.168.2.5	1.1.1.1	0x2c5b	Standard query (0)	support.google.com	65	IN (0x0001)	false
Oct 10, 2024 12:50:51.312803984 CEST	192.168.2.5	1.1.1.1	0x3d3c	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:51.312949896 CEST	192.168.2.5	1.1.1.1	0x792d	Standard query (0)	support.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 12:49:26.325090885 CEST	1.1.1.1	192.168.2.5	0x4d74	No error (0)	gmail.com		142.250.186.101	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:26.974859953 CEST	1.1.1.1	192.168.2.5	0xce94	No error (0)	mail.google.com		142.250.185.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:29.742650986 CEST	1.1.1.1	192.168.2.5	0xc8b3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 12:49:29.742700100 CEST	1.1.1.1	192.168.2.5	0x28be	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:35.792562962 CEST	1.1.1.1	192.168.2.5	0x8c2d	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:35.792562962 CEST	1.1.1.1	192.168.2.5	0x8c2d	No error (0)	www3.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:35.793064117 CEST	1.1.1.1	192.168.2.5	0x4069	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:37.532331944 CEST	1.1.1.1	192.168.2.5	0xc331	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:40.449618101 CEST	1.1.1.1	192.168.2.5	0x61d0	No error (0)	play.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:41.763953924 CEST	1.1.1.1	192.168.2.5	0x5b09	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:41.763953924 CEST	1.1.1.1	192.168.2.5	0x5b09	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:42.474457026 CEST	1.1.1.1	192.168.2.5	0x6611	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:42.474667072 CEST	1.1.1.1	192.168.2.5	0x3113	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 12:49:42.568779945 CEST	1.1.1.1	192.168.2.5	0xd565	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:42.568779945 CEST	1.1.1.1	192.168.2.5	0xd565	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:45.453187943 CEST	1.1.1.1	192.168.2.5	0x6842	No error (0)	support.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:47.275862932 CEST	1.1.1.1	192.168.2.5	0xb186	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:47.275862932 CEST	1.1.1.1	192.168.2.5	0xb186	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:47.276143074 CEST	1.1.1.1	192.168.2.5	0x87f4	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:49.825795889 CEST	1.1.1.1	192.168.2.5	0x879e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:49.825795889 CEST	1.1.1.1	192.168.2.5	0x879e	No error (0)	plus.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:49.826421976 CEST	1.1.1.1	192.168.2.5	0x6c3d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:51.139061928 CEST	1.1.1.1	192.168.2.5	0x28a8	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:51.139061928 CEST	1.1.1.1	192.168.2.5	0x28a8	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:51.139452934 CEST	1.1.1.1	192.168.2.5	0x9116	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:51.162725925 CEST	1.1.1.1	192.168.2.5	0x14ac	No error (0)	support.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:49:52.941407919 CEST	1.1.1.1	192.168.2.5	0x4afb	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:52.942425966 CEST	1.1.1.1	192.168.2.5	0x98d5	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:49:52.942425966 CEST	1.1.1.1	192.168.2.5	0x98d5	No error (0)	plus.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:00.496298075 CEST	1.1.1.1	192.168.2.5	0x920a	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:50:00.496602058 CEST	1.1.1.1	192.168.2.5	0xf376	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:50:00.496602058 CEST	1.1.1.1	192.168.2.5	0xf376	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:02.725092888 CEST	1.1.1.1	192.168.2.5	0x86c4	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:50:02.725092888 CEST	1.1.1.1	192.168.2.5	0x86c4	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.97	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:02.725214958 CEST	1.1.1.1	192.168.2.5	0x350d	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 12:50:39.048032045 CEST	1.1.1.1	192.168.2.5	0x2ffd	No error (0)	play.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:40.961441040 CEST	1.1.1.1	192.168.2.5	0xa1f5	No error (0)	play.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:44.392685890 CEST	1.1.1.1	192.168.2.5	0x3acb	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:44.392685890 CEST	1.1.1.1	192.168.2.5	0x3acb	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:48.794075966 CEST	1.1.1.1	192.168.2.5	0x3028	No error (0)	support.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 10, 2024 12:50:51.319497108 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	support.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	142.250.186.101	80	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 12:49:26.341146946 CEST	424	OUT	GET / HTTP/1.1 Host: gmail.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 10, 2024 12:49:26.964620113 CEST	607	IN	HTTP/1.1 301 Moved Permanently Location: https://mail.google.com/mail/u/0/ Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 230 X-XSS-Protection: 0 Date: Thu, 10 Oct 2024 10:26:42 GMT Expires: Thu, 10 Oct 2024 10:56:42 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1364 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6d 61 69 6c 2f 75 2f 30 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://mail.google.com/mail/u/0/">here</A>.</BODY></HTML>
Oct 10, 2024 12:50:11.969290018 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 10, 2024 12:50:56.985179901 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	142.250.186.101	80	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 12:50:11.344268084 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	142.250.185.197	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:27 UTC	667	OUT	GET /mail/u/0/ HTTP/1.1 Host: mail.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:28 UTC	778	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1 Strict-Transport-Security: max-age=10886400; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Date: Thu, 10 Oct 2024 10:49:27 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 10:49:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=194197 Date: Thu, 10 Oct 2024 10:49:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 10:49:32 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=194172 Date: Thu, 10 Oct 2024 10:49:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 10:49:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49741	142.250.185.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:36 UTC	1224	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-990860293&timestamp=1728557374993 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:36 UTC	1969	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-hP_FyAUfNYDC1Z2K_iHvXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 10 Oct 2024 10:49:36 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmLw1ZBikPj6kkkNiJ3SZ7AGAHHSv_OsBUB8ufsS63UgVu25xGoMxEUSV1gbgFiIh-PAo3k72ARmTD10iElJLym_MD4zJTWvJLOkMiU_NzEzLzk_Pzsztbg4tagstSjeyMDIxMDSyFLPwCK-wAAA1iktXA" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 37 36 31 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 50 5f 46 79 41 55 66 4e 59 44 43 31 5a 32 4b 5f 69 48 76 58 77 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 7615<html><head><script nonce="hP_FyAUfNYDC1Z2K_iHvXw">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 Data Ascii: Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\\(
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e Data Ascii: tch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&a in
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 7b 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b 64 3d 61 5b 62 2d Data Ascii: {var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){d=a[b-
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 Data Ascii: ol.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="function"&&type
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 66 28 21 49 28 6b 2c 66 29 29 Data Ascii: );e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("i");d(k);if(!I(k,f))
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 Data Ascii: urn g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 Data Ascii: on(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Math.random()*1E
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 68 Data Ascii: text__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=function(a){var b=h
2024-10-10 10:49:36 UTC	1969	IN	Data Raw: 22 6e 75 6d 62 65 72 22 3a 66 3d 53 74 72 69 6e 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 66 3d 66 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 66 3d 28 66 3d 73 62 28 66 29 29 3f 66 3a 22 5b 66 6e 5d 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 66 3d 0a 74 79 70 65 6f 66 20 66 7d 66 2e 6c 65 6e 67 74 68 3e 34 30 26 26 28 66 3d 66 2e 73 6c 69 63 65 28 30 2c 34 30 29 2b 22 2e 2e 2e 22 29 3b 63 2e 70 75 73 68 28 66 29 7d 62 2e 70 75 73 68 28 61 29 3b 63 2e 70 75 73 68 28 22 29 5c 6e 22 29 3b 74 72 79 7b 63 2e 70 75 73 68 28 77 62 28 61 2e 63 61 6c 6c 65 72 2c 62 29 29 7d 63 61 74 63 68 28 68 29 7b 63 2e 70 75 73 68 28 22 5b 65 78 63 65 70 74 69 6f 6e Data Ascii: "number":f=String(f);break;case "boolean":f=f?"true":"false";break;case "function":f=(f=sb(f))?f:"[fn]";break;default:f=typeof f}f.length>40&&(f=f.slice(0,40)+"...");c.push(f)}b.push(a);c.push(")\n");try{c.push(wb(a.caller,b))}catch(h){c.push("[exception

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49743	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:38 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:38 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:38 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49745	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:39 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:39 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:39 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49751	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:39 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 510 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:39 UTC	510	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 38 35 35 37 33 37 36 35 37 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"31",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1728557376577",null,null,n
2024-10-10 10:49:40 UTC	932	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=tdefNKVXudS_KeyIhSc_REhxetvYQRA_dXhoWWU7VvM-xdcr0_nZkPQP9KycSxQ5SM2WCJMWXZGHxlZunhgdizv4yQmL5DB0rMpJZ6RPyMNf9mwSzdtUoodOMGxICwLv-xJ-N6BOpp1HKrqrM6kA4LRDIgbgV-u7g3rlLLZ8zYjIUPdmnA; expires=Fri, 11-Apr-2025 10:49:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 10:49:40 GMT Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49752	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:39 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:39 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 38 35 35 37 33 37 36 38 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"31",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1728557376837",null,null,n
2024-10-10 10:49:40 UTC	933	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI; expires=Fri, 11-Apr-2025 10:49:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 10:49:40 GMT Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49761	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:41 UTC	672	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:41 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:41 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:41 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49759	142.250.185.68	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:41 UTC	1222	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:41 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 10 Oct 2024 10:07:51 GMT Expires: Fri, 18 Oct 2024 10:07:51 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 2510 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:41 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-10 10:49:41 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-10-10 10:49:41 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-10-10 10:49:41 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-10-10 10:49:41 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49764	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:42 UTC	672	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:42 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:42 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:42 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:42 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:42 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: b415ce4c-a01e-0053-0c33-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104942Z-185b7d577bdx4h6cdqr6y962uw00000001r0000000005byc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:42 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 10:49:42 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49766	142.250.185.164	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	643	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:43 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 10 Oct 2024 10:07:51 GMT Expires: Fri, 18 Oct 2024 10:07:51 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 2512 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:43 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-10 10:49:43 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-10-10 10:49:43 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-10-10 10:49:43 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-10-10 10:49:43 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:43 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: cfc4547a-a01e-0098-41ce-198556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104943Z-185b7d577bdd97twt8zr6y8zrg00000002bg00000000hwqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:43 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:43 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104943Z-185b7d577bdhgg84qrpnm2d6w0000000024g00000000g809 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:43 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:43 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c8ae7944-b01e-0002-48f9-191b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104943Z-185b7d577bdvng2dzp910e3fdc00000002eg00000000au1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:43 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:43 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: d01aae37-c01e-007a-5dfb-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104943Z-185b7d577bdqh8w7ruf4kwucmw000000028g0000000007y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:43 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 8de028b1-001e-005a-7787-1ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104943Z-185b7d577bdchm66cr3227wnbw00000001yg000000005yp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49775	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:43 UTC	2100	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728557350538&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-10 10:49:43 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-10 10:49:43 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-10 10:49:44 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6C7F31AE139540DAA1E841F094F241ED Ref B: LAX311000111019 Ref C: 2024-10-10T10:49:44Z Date: Thu, 10 Oct 2024 10:49:44 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.5fed0117.1728557384.5de8882

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:44 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104944Z-17db6f7c8cfrbg6x0qcg5vwtus00000000ng0000000088xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:44 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: ed02cc85-901e-0015-15f6-19b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104944Z-185b7d577bdvng2dzp910e3fdc00000002eg00000000au29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:44 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1633ae45-701e-006f-7504-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104944Z-185b7d577bdwmw4ckbc4ywwmwg00000001yg00000000568r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:44 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:44 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 93ca84ad-001e-0014-016e-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104944Z-185b7d577bdx4h6cdqr6y962uw00000001sg0000000013ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:44 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:44 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:44 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 14c2f8e7-301e-0000-27cc-19eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104944Z-185b7d577bdchm66cr3227wnbw00000001z0000000004qbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:44 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c373b686-b01e-001e-567b-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-185b7d577bdx4h6cdqr6y962uw00000001qg000000006q03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:45 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d01f8df5-c01e-007a-10fd-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-185b7d577bdt2k4f7f9nr1pp7s00000001x000000000gm27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 0f93c021-e01e-0020-05fb-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-185b7d577bdqh8w7ruf4kwucmw0000000280000000001m5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 38c0e901-901e-0016-3f33-1aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-185b7d577bdvdf6b7wzrpm3w2w00000001y000000000fsmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 35b61c96-e01e-0052-1103-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-185b7d577bdfx2dd0gsb231cq00000000290000000007e0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:45 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49787	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	1307	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:45 UTC	1227	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 38 35 35 37 33 37 34 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1728557374000",null,null,nu
2024-10-10 10:49:45 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=YeH1admxzhv0v8-QG9zetUIB1XOIzY32sE9ms_agB57MahUOPG6k53sScPBhN7CEMlTowp-K6PC5CM9AXiP_eOGeXXoj5N0P4T-2GozxTTBPo26m3dSYL-r5K_j0L2KHFbV-11C7KCEfS359DRjtjpUtXBYeN4h6h1yPSXS7l6Ks4AXQnsZIsY8GVMY; expires=Fri, 11-Apr-2025 10:49:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:45 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 10 Oct 2024 10:49:45 GMT Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:45 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104945Z-17db6f7c8cfvzwz27u5rnq9kpc00000000p0000000004e8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49789	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	1013	OUT	GET /chrome/answer/6130773?hl=en-US HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jTh1B0OcBKvguvwdiIl1pZQC8HhLvKxbg2t5qTQE-t4YHJWszYPiOzq6Ok45mX8OtWGpmEIkBUZOhrdayGguI4uMQnC46AVrk8AyyYCS0qOl9CKnjwblA477Y5w2IaICEC02aLNEXVxkIF0lacTunu1Hb24dg2ekfhInthIyfy_jLckprAI
2024-10-10 10:49:46 UTC	460	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/chrome/answer/6130773?hl=en Date: Thu, 10 Oct 2024 10:49:46 GMT Expires: Thu, 10 Oct 2024 10:49:46 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 251 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:46 UTC	251	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/chrome/answer/6130773?hl=en">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: aa894e1a-201e-0000-7cf8-19a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104946Z-185b7d577bdt2k4f7f9nr1pp7s000000021000000000889r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:46 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a5ffddab-301e-003f-58cf-19266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104946Z-185b7d577bdvng2dzp910e3fdc00000002cg00000000fa3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: e268cc1a-b01e-001e-5327-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104946Z-185b7d577bdchm66cr3227wnbw00000001u000000000ekbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 4ad26f23-901e-00ac-1503-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104946Z-185b7d577bdd4z6mz0c833nvec00000002bg00000000a55z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49790	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	1018	OUT	GET /chrome/answer/6130773?hl=en HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=YeH1admxzhv0v8-QG9zetUIB1XOIzY32sE9ms_agB57MahUOPG6k53sScPBhN7CEMlTowp-K6PC5CM9AXiP_eOGeXXoj5N0P4T-2GozxTTBPo26m3dSYL-r5K_j0L2KHFbV-11C7KCEfS359DRjtjpUtXBYeN4h6h1yPSXS7l6Ks4AXQnsZIsY8GVMY
2024-10-10 10:49:46 UTC	1621	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:46 GMT Expires: Thu, 10 Oct 2024 10:49:46 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-wEpmodX0WZdO72ohv4qG' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; expires=Fri, 11-Apr-2025 10:49:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; expires=Fri, 11-Apr-2025 10:49:45 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 41 4e 53 57 45 52 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 20 2d 20 43 6f 6d 70 75 74 65 72 20 2d 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta conten
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 Data Ascii: m/s/roboto/v18/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 Data Ascii: nt-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(http
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 Data Ascii: -1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-04
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c Data Ascii: +02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}</style><style>@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 33 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 Data Ascii: 2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94Yt3CwZ-Pw.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 2b 53 61 6e 73 2b 54 65 78 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 67 73 74 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 77 45 70 6d 6f 64 58 30 57 5a 64 4f 37 32 6f 68 76 34 71 47 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 43 6f 6c 6f 72 2b 45 6d 6f 6a 69 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 6e 63 65 Data Ascii: gleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap" as="style" id="font-gst" rel="preload" nonce="wEpmodX0WZdO72ohv4qG"><link href="https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap" as="style" id="font-nce
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 74 6f 7d 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 69 6e 68 65 72 69 74 7d 70 72 65 2c 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 2c 74 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 7d 62 6f 64 79 2e 6d 6f 62 69 6c 65 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 64 69 76 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 67 62 5f 6e 66 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 72 65 6d 3b 6d 69 6e Data Ascii: to}table,caption{color:inherit;font-size:inherit;font-weight:inherit;font-style:inherit;font-variant:inherit}pre,code,kbd,samp,tt{font-family:monospace,monospace}body.mobile{margin:0;position:relative;width:100%}div{outline:none}.gb_nf{min-height:3rem;min
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 6e 67 3a 2e 33 31 32 35 72 65 6d 7d 2e 68 63 66 65 20 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 68 63 66 65 20 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 34 34 34 37 34 36 7d 2e 68 63 66 65 20 69 6d 67 3a 6e 6f 74 28 5b 63 6c 61 73 73 5e 3d 22 67 62 5f 22 5d 29 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 68 63 66 65 20 2e 67 61 69 61 62 61 72 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 68 63 66 65 20 63 69 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 68 63 66 65 20 73 75 62 2c 2e 68 63 66 65 20 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 Data Ascii: ng:.3125rem}.hcfe input::placeholder,.hcfe textarea::placeholder{color:#444746}.hcfe img:not([class^="gb_"]){vertical-align:middle}.hcfe .gaiabar a:hover{text-decoration:none}.hcfe cite{font-style:normal}.hcfe sub,.hcfe sup{font-size:75%;line-height:0;pos
2024-10-10 10:49:46 UTC	1621	IN	Data Raw: 61 64 65 72 20 2e 72 65 73 74 72 69 63 74 65 64 2d 62 61 6e 6e 65 72 7b 6c 65 66 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 34 35 70 78 29 7d 2e 68 63 66 65 3e 68 65 61 64 65 72 20 2e 72 65 73 74 72 69 63 74 65 64 2d 62 61 6e 6e 65 72 2e 73 74 69 63 6b 79 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 31 35 70 78 29 7b 2e 68 63 66 65 3e 68 65 61 64 65 72 20 2e 72 65 73 74 72 69 63 74 65 64 2d 62 61 6e 6e 65 72 2c 2e 70 72 6f 6d 6f 74 65 64 2d 73 65 61 72 63 68 2d 62 6f 64 79 20 2e 68 63 66 65 3e 68 65 61 64 65 72 20 2e 72 65 73 74 72 69 63 74 65 64 2d 62 61 6e 6e 65 72 7b 6c 65 66 74 3a 38 30 70 78 7d 7d 2e 70 72 6f 6d 6f 74 65 64 2d 73 65 61 72 63 68 2d 62 6f 64 79 20 2e 68 63 66 65 3e 68 65 61 64 65 Data Ascii: ader .restricted-banner{left:calc(50% - 45px)}.hcfe>header .restricted-banner.sticky{position:fixed}@media (min-width:615px){.hcfe>header .restricted-banner,.promoted-search-body .hcfe>header .restricted-banner{left:80px}}.promoted-search-body .hcfe>heade

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 837be9b2-101e-0046-5ec9-1991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104946Z-185b7d577bdxdkz6n7f63e3880000000024g000000009r2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49795	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:46 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=YeH1admxzhv0v8-QG9zetUIB1XOIzY32sE9ms_agB57MahUOPG6k53sScPBhN7CEMlTowp-K6PC5CM9AXiP_eOGeXXoj5N0P4T-2GozxTTBPo26m3dSYL-r5K_j0L2KHFbV-11C7KCEfS359DRjtjpUtXBYeN4h6h1yPSXS7l6Ks4AXQnsZIsY8GVMY
2024-10-10 10:49:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:47 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:47 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2e443ec0-d01e-0066-4b04-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdd97twt8zr6y8zrg00000002m0000000000a0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-17db6f7c8cf7s6chrx36act2pg00000000g0000000000b5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 006c2e63-c01e-000b-0675-1ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdx4h6cdqr6y962uw00000001p000000000a25s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 21d4d58c-201e-0051-64d1-197340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdvdf6b7wzrpm3w2w000000020000000000b6dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 604435ea-501e-00a3-69c9-19c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdfx2dd0gsb231cq000000002ag0000000044sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 935479ee-801e-008f-6f7b-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdd97twt8zr6y8zrg00000002kg000000001x3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8cee974c-001e-005a-2e33-1ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104947Z-185b7d577bdhgg84qrpnm2d6w000000002c0000000000px9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:47 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c9beacfb-301e-0052-4e61-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104948Z-185b7d577bdhgg84qrpnm2d6w0000000025g00000000ehyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49812	142.250.185.97	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:48 UTC	807	OUT	GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:48 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 792 X-XSS-Protection: 0 Date: Thu, 10 Oct 2024 08:33:33 GMT Expires: Fri, 11 Oct 2024 08:33:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 8175 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:48 UTC	792	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 02 d1 49 44 41 54 48 89 a5 96 cd 4e 13 51 14 c7 7f e7 ce d8 41 94 34 d2 c8 47 f8 10 c2 16 01 17 3c 81 44 48 64 4d c5 b5 31 3e 81 0f c1 1b 40 60 2d ba 85 45 9b d4 27 60 21 22 db 06 f9 68 2a 24 d4 d0 0a 74 6a 67 ae 8b 8e 74 da de 19 30 9e ae 7a ee 99 df fd 9f 3b 67 ce 3d 82 d1 f2 8e 35 c2 94 5e 50 b3 7a 88 24 70 21 05 7f 47 32 ec 79 c7 13 ae e9 09 e9 74 9d da d7 cb 2c 32 47 af 21 be 44 8e 2d 67 73 b0 7e 2b e8 60 52 36 98 21 61 56 0a 40 8d 2f fa cd f8 7e 0c e8 30 a9 57 78 1b 83 08 db 9a bc 7f 72 61 04 1d f5 fa 1f 78 71 47 0c 40 56 bd 1e 2d 75 80 8e 7a fd 4f 3c ff 07 0c c0 67 96 c6 4a 2d a0 c3 a4 fe c8 7c 67 a4 e0 Data Ascii: PNGIHDR$$KPsBITUFIDATHNQA4G<DHdM1>@`-E'`!"h*$tjgt0z;g=5^Pz$p!G2yt,2G!D-gs~+`R6!aV@/~0WxraxqG@V-uzO<gJ-\|g

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	65173	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:48 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104948Z-185b7d577bdcmhtqq5qad662uw00000002dg00000000e3nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:48 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:48 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:48 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104948Z-17db6f7c8cf7s6chrx36act2pg00000000h0000000000d92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:48 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	65171	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:48 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:48 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 856b37ee-301e-001f-69fa-19aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104948Z-185b7d577bdcmhtqq5qad662uw00000002cg00000000fpd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:48 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	65175	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:49 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:49 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	65176	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	1726	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210
2024-10-10 10:49:49 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-10-10 10:49:49 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:49 GMT Expires: Thu, 10 Oct 2024 10:49:49 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:49 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-10 10:49:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	65179	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:49 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:49 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	65177	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	1660	OUT	POST /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634 HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210
2024-10-10 10:49:49 UTC	552	OUT	Data Raw: 7b 22 63 6f 6d 6d 6f 6e 5f 70 61 72 61 6d 73 22 3a 7b 22 63 6f 6e 74 65 78 74 5f 70 61 72 61 6d 73 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 30 38 30 30 31 31 32 2c 31 37 30 36 35 33 38 2c 31 37 31 34 32 35 34 2c 31 30 38 30 30 35 36 31 2c 31 30 38 30 30 36 32 31 2c 31 30 38 30 30 36 37 32 2c 31 30 38 30 30 36 39 35 2c 31 30 38 30 30 37 30 30 2c 31 30 38 30 30 37 30 37 2c 31 30 38 30 30 37 33 38 2c 31 30 38 30 30 37 36 31 2c 31 30 38 30 30 38 34 38 2c 31 30 38 30 30 38 38 30 2c 31 30 38 30 30 39 32 32 2c 31 30 38 30 30 39 35 30 2c 31 30 38 30 30 39 35 37 2c 31 30 38 30 31 30 33 32 2c 31 30 38 30 31 30 34 32 2c 31 30 38 30 31 31 35 30 2c 31 30 38 30 31 32 38 38 2c 31 30 38 30 31 33 34 35 2c 31 30 38 30 31 35 33 39 2c 31 30 38 30 31 36 Data Ascii: {"common_params":{"context_params":{"experiment_id":[10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,108016
2024-10-10 10:49:50 UTC	857	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:49 GMT Expires: Thu, 10 Oct 2024 10:49:49 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:50 UTC	44	IN	Data Raw: 32 36 0d 0a 7b 22 68 65 6c 70 63 65 6e 74 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 75 73 65 72 5f 70 72 65 66 22 3a 5b 5d 7d 0d 0a Data Ascii: 26{"helpcenter":"chrome","user_pref":[]}
2024-10-10 10:49:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	65180	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:49 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:49 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	65174	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:49 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:49 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	65178	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:49 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:49 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	65181	142.250.185.68	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	1005	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 10 Oct 2024 10:49:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	65194	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:49 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104949Z-17db6f7c8cf7s6chrx36act2pg00000000e0000000000c2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:49 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	65193	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:49 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: dd82c002-401e-0016-14c9-1953e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104949Z-185b7d577bd6kqv2c47qpxmgb000000002hg000000004sx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:49 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	65191	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104949Z-17db6f7c8cf7s6chrx36act2pg00000000f0000000000ebp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	65190	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a9a22b8f-501e-007b-21d3-195ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104949Z-185b7d577bdt2k4f7f9nr1pp7s00000001z000000000c86s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	65192	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:49 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:49 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104949Z-17db6f7c8cf7s6chrx36act2pg00000000e0000000000c2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:49 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	65196	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1553 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1553	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 37 34 32 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557387426",null,null,null,
2024-10-10 10:49:50 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:50 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	65200	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:50 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: de1f8e53-401e-0064-5dfb-1954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104950Z-185b7d577bd787g6hpze00e34800000001vg0000000037qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:50 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	65203	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 868507a7-b01e-003e-788e-1a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104950Z-185b7d577bd6tsgdmpfvwsf42g00000001g00000000068dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	65202	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 47cb7b1a-f01e-003f-4282-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104950Z-185b7d577bdx4h6cdqr6y962uw00000001p000000000a2ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	65201	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ecc6c3cc-f01e-0003-1f2f-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104950Z-185b7d577bdxdkz6n7f63e3880000000027g000000002xv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	65204	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:50 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: df5113df-601e-0050-0cfd-192c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104950Z-185b7d577bdxdkz6n7f63e38800000000260000000006z79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:50 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	65208	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1159	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 37 39 30 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557387903",null,null,null
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	65205	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1092	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 37 34 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557387430",null,null,null
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	65206	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1555 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1555	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 37 39 30 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557387904",null,null,null,
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	65207	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1577 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1577	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 37 39 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557387901",null,null,null,
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	65209	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:50 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:50 UTC	1584	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 39 32 35 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557389252",null,null,null,
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	65199	142.250.185.110	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	1099	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7LPvRDgzcqA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo9wdgl3D0Cd5pn6O1gZXHwWDc_oTg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:51 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 09 Oct 2024 18:36:39 GMT Expires: Thu, 09 Oct 2025 18:36:39 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 18:12:58 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 58392 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:51 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-10-10 10:49:51 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	65215	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1127 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:51 UTC	1127	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 39 32 35 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557389257",null,null,null
2024-10-10 10:49:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	65218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104951Z-17db6f7c8cfqz2ks32p5b0eprg00000000h0000000008ry2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	65216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:51 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: acd8be42-501e-000a-16f9-190180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104951Z-185b7d577bdwmw4ckbc4ywwmwg000000020g0000000009s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:51 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	65219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 11f2cb3c-501e-0029-7ed1-19d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104951Z-185b7d577bdqh8w7ruf4kwucmw0000000250000000009vp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:51 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	65217	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:51 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 53a4bd0f-c01e-00ad-6beb-1aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104951Z-17db6f7c8cf7s6chrx36act2pg00000000gg000000000cfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 10:49:51 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	65220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104951Z-17db6f7c8cfqz2ks32p5b0eprg00000000ng000000008mmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	65221	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	1079	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 915 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:51 UTC	915	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 38 38 36 39 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1728557388696",null,null,null,
2024-10-10 10:49:52 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	65228	142.250.184.238	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	1393	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.1.1182680858.1728557389
2024-10-10 10:49:52 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:52 GMT Expires: Thu, 10 Oct 2024 10:49:52 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:52 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-10-10 10:49:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	65227	142.250.186.33	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:51 UTC	521	OUT	GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 10:49:53 UTC	528	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 792 X-XSS-Protection: 0 Date: Thu, 10 Oct 2024 10:49:13 GMT Expires: Fri, 11 Oct 2024 10:49:13 GMT Cache-Control: public, max-age=86400, no-transform Age: 40 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:53 UTC	792	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 02 d1 49 44 41 54 48 89 a5 96 cd 4e 13 51 14 c7 7f e7 ce d8 41 94 34 d2 c8 47 f8 10 c2 16 01 17 3c 81 44 48 64 4d c5 b5 31 3e 81 0f c1 1b 40 60 2d ba 85 45 9b d4 27 60 21 22 db 06 f9 68 2a 24 d4 d0 0a 74 6a 67 ae 8b 8e 74 da de 19 30 9e ae 7a ee 99 df fd 9f 3b 67 ce 3d 82 d1 f2 8e 35 c2 94 5e 50 b3 7a 88 24 70 21 05 7f 47 32 ec 79 c7 13 ae e9 09 e9 74 9d da d7 cb 2c 32 47 af 21 be 44 8e 2d 67 73 b0 7e 2b e8 60 52 36 98 21 61 56 0a 40 8d 2f fa cd f8 7e 0c e8 30 a9 57 78 1b 83 08 db 9a bc 7f 72 61 04 1d f5 fa 1f 78 71 47 0c 40 56 bd 1e 2d 75 80 8e 7a fd 4f 3c ff 07 0c c0 67 96 c6 4a 2d a0 c3 a4 fe c8 7c 67 a4 e0 Data Ascii: PNGIHDR$$KPsBITUFIDATHNQA4G<DHdM1>@`-E'`!"h*$tjgt0z;g=5^Pz$p!G2yt,2G!D-gs~+`R6!aV@/~0WxraxqG@V-uzO<gJ-\|g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	65231	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:52 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:52 UTC	1108	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 30 38 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557390854",null,null,null
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	65232	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:52 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:52 UTC	1108	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 30 39 36 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557390963",null,null,null
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	65230	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:52 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1568 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:52 UTC	1568	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 30 38 34 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557390847",null,null,null,
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	65234	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:52 UTC	1232	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:53 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Thu, 10 Oct 2024 10:49:53 GMT Expires: Thu, 10 Oct 2024 10:49:53 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	926	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-10-10 10:49:53 UTC	1390	IN	Data Raw: fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd 99 fd fd fd db fd fd fd fa fd fd fd fa fd fd fd da fd fd fd 98 ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0f 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 00 80 01 00 00 c0 03 00 00 f0 0f 00 00 28 00 00 00 20 00 00 00 40 Data Ascii: ]i<J:GZf20( @
2024-10-10 10:49:53 UTC	1390	IN	Data Raw: 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff fc d8 c3 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fa fe fe fe 23 00 00 00 00 00 00 00 00 fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ea f4 e6 ff 5b ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 67 b2 4c ff cc e5 c2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 ef da ff a8 b1 63 ff f1 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f5 90 54 ff fe f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 9a 00 00 00 00 fe fe fe 0e fd fd fd f6 ff ff ff ff ff ff ff ff ff ff ff ff 82 c7 8f ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 75 b9 5c ff f2 f9 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: S4w7ABB#[>S4S4S4S4gLcBBBBTS4S4S4S4u\
2024-10-10 10:49:53 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 5a ff ff ff ff ff ff ff ff ff ff ff ff dd f6 fe ff 07 b9 fb ff 20 77 f1 ff 35 43 ea ff 35 43 ea ff 48 55 ec ff ee f0 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 57 ff ff ff 0f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff 6d 90 f4 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 61 6c ef ff f2 f2 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: Z w5C5CHUWm5C5C5C5Cal
2024-10-10 10:49:53 UTC	342	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f6 fd fd fd 9d fe fe fe 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0e fe fe fe 5a fd fd fd 9c fd fd fd cb fd fd fd ed fd fd fd fa fd fd fd fa fd fd fd ec fd fd fd cb fd fd fd 9c fe fe fe 59 fe fe fe 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 03 ff ff 00 00 ff fc 00 00 3f f8 00 00 1f f0 00 00 0f e0 00 00 07 c0 00 00 03 c0 00 00 03 80 00 00 01 80 00 00 01 00 00 00 Data Ascii: %ZY?
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	65233	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:52 UTC	1878	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 167 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:52 UTC	167	OUT	Data Raw: 5b 5b 22 35 34 39 38 38 36 32 30 39 33 35 37 33 37 30 36 35 32 33 2d 45 55 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 2c 22 63 68 72 6f 6d 65 22 2c 31 2c 31 2c 22 65 6e 22 2c 22 31 33 39 36 35 38 30 31 39 30 22 5d 2c 5b 6e 75 6c 6c 2c 22 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 22 2c 22 36 31 33 30 37 37 33 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["5498862093573706523-EU","https://support.google.com/chrome/answer/6130773?hl=en","chrome",1,1,"en","1396580190"],[null,"Browse Chrome as a guest","6130773"],null,1]
2024-10-10 10:49:53 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:53 GMT Expires: Thu, 10 Oct 2024 10:49:53 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	65240	142.250.184.238	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	1388	OUT	GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714254,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,97601634 HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:53 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:53 GMT Expires: Thu, 10 Oct 2024 10:49:53 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	65238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: d19f014e-401e-0035-1170-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104953Z-185b7d577bd6tsgdmpfvwsf42g00000001h000000000416s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	65242	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:53 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:53 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:53 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	65236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: e1a32b24-001e-00ad-488c-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104953Z-185b7d577bdxdkz6n7f63e3880000000024000000000aquv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	65235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 3216e2cb-a01e-001e-0dfb-1949ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104953Z-185b7d577bdd97twt8zr6y8zrg00000002eg00000000bnef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	65241	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	1079	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 920 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:53 UTC	920	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 31 30 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1728557391001",null,null,null,
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	65239	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c972fac3-b01e-0097-34f9-194f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104953Z-185b7d577bdt2k4f7f9nr1pp7s0000000220000000006epg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	65237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e1f0f3b9-901e-0048-2204-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104953Z-185b7d577bdfx2dd0gsb231cq000000002c0000000000hf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	65246	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:53 UTC	1584	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 32 32 37 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1728557392278",null,null,null,
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	65247	142.250.185.142	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:53 UTC	1088	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1127 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:53 UTC	1127	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 32 38 35 35 37 33 39 32 32 38 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1728557392280",null,null,null
2024-10-10 10:49:53 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-10 10:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	65250	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2c827ab8-101e-0079-2f05-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104954Z-185b7d577bdqh8w7ruf4kwucmw000000022000000000ex72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	65249	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3954938d-f01e-00aa-5ffb-198521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104954Z-185b7d577bdd4z6mz0c833nvec000000029g00000000f0mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	65248	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 603adcca-801e-0048-0677-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104954Z-185b7d577bdvng2dzp910e3fdc00000002bg00000000kys1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	65253	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:54 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:54 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:54 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	65252	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104954Z-17db6f7c8cfrbg6x0qcg5vwtus00000000g00000000088y8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:54 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	65251	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:54 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1bd90660-c01e-008e-2efb-197381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104954Z-185b7d577bdwmw4ckbc4ywwmwg00000001ug00000000egma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:54 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	65254	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	737	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:55 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:55 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:55 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	65257	142.250.184.238	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	1456	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:55 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:55 GMT Expires: Thu, 10 Oct 2024 10:49:55 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:55 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-10-10 10:49:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	65256	142.250.184.238	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:54 UTC	918	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Thu, 10 Oct 2024 10:49:55 GMT Expires: Thu, 10 Oct 2024 10:49:55 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:55 UTC	926	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-10-10 10:49:55 UTC	1390	IN	Data Raw: fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd 99 fd fd fd db fd fd fd fa fd fd fd fa fd fd fd da fd fd fd 98 ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0f 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 00 80 01 00 00 c0 03 00 00 f0 0f 00 00 28 00 00 00 20 00 00 00 40 Data Ascii: ]i<J:GZf20( @
2024-10-10 10:49:55 UTC	1390	IN	Data Raw: 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff fc d8 c3 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fa fe fe fe 23 00 00 00 00 00 00 00 00 fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ea f4 e6 ff 5b ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 67 b2 4c ff cc e5 c2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 ef da ff a8 b1 63 ff f1 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f5 90 54 ff fe f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 9a 00 00 00 00 fe fe fe 0e fd fd fd f6 ff ff ff ff ff ff ff ff ff ff ff ff 82 c7 8f ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 75 b9 5c ff f2 f9 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: S4w7ABB#[>S4S4S4S4gLcBBBBTS4S4S4S4u\
2024-10-10 10:49:55 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 5a ff ff ff ff ff ff ff ff ff ff ff ff dd f6 fe ff 07 b9 fb ff 20 77 f1 ff 35 43 ea ff 35 43 ea ff 48 55 ec ff ee f0 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 57 ff ff ff 0f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff 6d 90 f4 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 61 6c ef ff f2 f2 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: Z w5C5CHUWm5C5C5C5Cal
2024-10-10 10:49:55 UTC	342	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f6 fd fd fd 9d fe fe fe 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0e fe fe fe 5a fd fd fd 9c fd fd fd cb fd fd fd ed fd fd fd fa fd fd fd fa fd fd fd ec fd fd fd cb fd fd fd 9c fe fe fe 59 fe fe fe 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 03 ff ff 00 00 ff fc 00 00 3f f8 00 00 1f f0 00 00 0f e0 00 00 07 c0 00 00 03 c0 00 00 03 80 00 00 01 80 00 00 01 00 00 00 Data Ascii: %ZY?
2024-10-10 10:49:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	65258	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	1285	OUT	GET /accounts?hl=en-US&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:55 UTC	462	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts/?hl=en&p=account_iph Date: Thu, 10 Oct 2024 10:49:55 GMT Expires: Thu, 10 Oct 2024 10:49:55 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 257 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:55 UTC	257	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 61 63 63 6f 75 6e 74 5f 69 70 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts/?hl=en&p=account_iph">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	65265	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: ec1d2ac3-501e-0035-7297-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104955Z-185b7d577bdvng2dzp910e3fdc00000002f000000000bb55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:55 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	65263	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4440e13f-b01e-003e-016e-1a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104955Z-185b7d577bdt2k4f7f9nr1pp7s00000001yg00000000cwcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:55 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	65264	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0f8fe9c7-e01e-0020-59f9-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104955Z-185b7d577bdchm66cr3227wnbw00000001wg00000000a7ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	65266	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 141663f2-e01e-001f-7437-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104955Z-185b7d577bdd4z6mz0c833nvec000000029000000000gexd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	65267	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104955Z-17db6f7c8cfqz2ks32p5b0eprg00000000q0000000006642 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	65259	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	1283	OUT	GET /accounts/?hl=en&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:55 UTC	532	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&p=account_iph&rd=1 X-Robots-Tag: follow,index Date: Thu, 10 Oct 2024 10:49:55 GMT Expires: Thu, 10 Oct 2024 10:49:55 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 307 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:55 UTC	307	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 36 34 31 35 34 31 38 36 36 36 32 30 30 38 38 2d 31 31 36 38 33 34 32 31 30 26 61 6d 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	65268	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:55 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:55 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:55 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:55 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	65270	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:55 UTC	737	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	65275	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdxdkz6n7f63e38800000000250000000008ycd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	65274	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 76375c60-d01e-0014-2f02-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdfx2dd0gsb231cq0000000029g000000005wf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	65272	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: eca00b4a-001e-000b-3e6d-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdgsgcm5251kab51w00000001wg00000000cap1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	65271	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 7be3ce02-101e-0065-5b8e-1a4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bd787g6hpze00e34800000001u0000000005uyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	65273	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 7491d3e7-701e-005c-598a-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bd6kqv2c47qpxmgb000000002bg00000000kwx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	65276	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	1325	OUT	GET /accounts?hl=en&visit_id=638641541866620088-116834210&p=account_iph&rd=1 HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:56 UTC	532	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph X-Robots-Tag: follow,index Date: Thu, 10 Oct 2024 10:49:56 GMT Expires: Thu, 10 Oct 2024 10:49:56 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 307 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:56 UTC	307	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 36 34 31 35 34 31 38 36 36 36 32 30 30 38 38 2d 31 31 36 38 33 34 32 31 30 26 61 6d 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	65277	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:56 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:56 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:56 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	65279	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 854d8853-d01e-007a-037c-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdcmhtqq5qad662uw00000002gg0000000070da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	65280	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 38c628c3-f01e-00aa-23c2-198521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdd4z6mz0c833nvec00000002dg0000000063sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	65278	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 539cbafa-f01e-005d-6c8c-1a13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdfx2dd0gsb231cq0000000025000000000hhbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	65282	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-17db6f7c8cf7s6chrx36act2pg00000000gg000000000crz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	65281	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:56 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: ef53c767-f01e-0071-1df9-19431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104956Z-185b7d577bdvdf6b7wzrpm3w2w00000001y000000000ft2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	65283	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	1325	OUT	GET /accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:57 UTC	729	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Thu, 10 Oct 2024 10:49:57 GMT Expires: Thu, 10 Oct 2024 10:49:57 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-W2H/UY8hk2HCazkqQuQE' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:57 UTC	661	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 48 4f 4d 45 50 41 47 45 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 33 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 Data Ascii: le=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d Data Ascii: boto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 Data Ascii: 'woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)format('woff2');u
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 Data Ascii: font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(htt
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f Data Ascii: /roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}</style><style>@font-face{fo
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 33 4f 77 70 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 Data Ascii: 20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 Data Ascii: 2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Google Sans';font-s
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 73 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 57 32 48 2f 55 59 38 68 6b 32 48 43 61 7a 6b 71 51 75 51 45 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 48 33 30 52 39 50 4e 51 46 4e 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 57 32 48 2f 55 59 38 68 6b 32 48 43 61 7a 6b 71 51 75 51 45 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 57 32 48 2f 55 59 38 68 6b 32 48 43 61 7a 6b 71 51 75 51 45 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 61 34 5f 69 64 3d 27 47 2d 48 33 30 52 39 50 4e 51 46 4e 27 3b 76 61 72 20 68 63 5f 6e 61 Data Ascii: s.js" async="" nonce="W2H/UY8hk2HCazkqQuQE"></script><script src="https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN" async="" nonce="W2H/UY8hk2HCazkqQuQE"></script><script nonce="W2H/UY8hk2HCazkqQuQE">(function(){var ga4_id='G-H30R9PNQFN';var hc_na
2024-10-10 10:49:57 UTC	1390	IN	Data Raw: 2e 38 37 35 72 65 6d 7d 2e 68 63 66 65 20 70 7b 6d 61 72 67 69 6e 3a 2e 33 31 32 35 72 65 6d 20 30 7d 2e 68 63 66 65 20 61 7b 63 6f 6c 6f 72 3a 23 30 62 35 37 64 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 68 63 66 65 20 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 2e 68 63 66 65 20 61 72 74 69 63 6c 65 20 73 65 63 74 69 6f 6e 20 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 36 30 30 72 65 6d 3b 74 6f 70 3a 61 75 74 6f 3b 77 69 64 74 68 3a 30 2e 30 36 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 30 2e 30 36 32 35 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 73 6b 69 70 2d 6c Data Ascii: .875rem}.hcfe p{margin:.3125rem 0}.hcfe a{color:#0b57d0;text-decoration:none}.hcfe a img{border:0}.hcfe article section section{padding:0}.skip-link{position:absolute;left:-600rem;top:auto;width:0.0625rem;height:0.0625rem;overflow:hidden;z-index:1}.skip-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	65284	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:57 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:57 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:57 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	65285	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 124c4085-f01e-0096-13fa-1910ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104957Z-185b7d577bdvdf6b7wzrpm3w2w00000001xg00000000gw32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	65288	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 82cb7222-a01e-0098-8034-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104957Z-185b7d577bdvdf6b7wzrpm3w2w00000001y000000000ft4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	65286	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d635dee5-201e-00aa-5074-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104957Z-185b7d577bdf28b724ywa67gzn00000002200000000025t6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	65287	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 36c0fca6-001e-0065-27ce-190b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104957Z-185b7d577bd6kqv2c47qpxmgb000000002e000000000cugs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	65289	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:57 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:57 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104957Z-17db6f7c8cfrbg6x0qcg5vwtus00000000hg000000008ma1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:57 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	65292	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:58 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:58 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	65295	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8dff9b62-b01e-00ab-4e98-1adafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104958Z-185b7d577bd6tsgdmpfvwsf42g00000001cg00000000dsa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	65290	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 99b3acd6-c01e-0046-32fd-192db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104958Z-185b7d577bdvdf6b7wzrpm3w2w000000024g000000000scr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:58 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	65291	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 78f2e039-101e-005a-4502-1a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104958Z-185b7d577bdhgg84qrpnm2d6w0000000024g00000000g8pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:58 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	65293	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d6ef3fde-501e-0047-54cb-19ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104958Z-185b7d577bdt2k4f7f9nr1pp7s000000020000000000aqft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:58 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	65294	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:58 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:58 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:58 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104958Z-17db6f7c8cfrbg6x0qcg5vwtus00000000qg000000004rnd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:58 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	65302	172.217.16.206	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	748	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY
2024-10-10 10:49:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-10 10:49:59 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-10 10:49:59 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	65301	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: de6efc93-701e-001e-3381-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104959Z-185b7d577bdx4h6cdqr6y962uw00000001qg000000006qnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:59 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	65299	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eb55612a-501e-007b-0861-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104959Z-185b7d577bd8m52vbwet1cqbbw00000002bg00000000hx6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	65297	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:59 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104959Z-17db6f7c8cf7s6chrx36act2pg00000000m0000000000etd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	65298	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c8c7b876-b01e-0097-1bbd-194f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104959Z-185b7d577bdd97twt8zr6y8zrg00000002cg00000000fz57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	65300	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 10:49:59 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 10:49:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T104959Z-185b7d577bdhgg84qrpnm2d6w000000002a0000000005nuu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 10:49:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	65307	142.250.185.78	443	3996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 10:49:59 UTC	1954	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714254%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts?hl=en&visit_id=638641541866620088-116834210&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=DKymLBzrJi0JjTosqez9uap2Qz9keCg4RRUGa8tZLkU-ozKNRE9E6z0KTQygdYWZDx8pO3UXzUqo6bDGNTtxIc4tbiH_SKWWmuQq7_-GQcn794ryfLsS6t0f-rGE8WCx-p7lIxMZH1FpchymTz_t5e6UJmWQb8grOTrrsftboiUAftWPhhIRsmRX8A-9S02wVpJy7YrjOLweKecSxZApCdRdt7uVQJ5ozLh47UWWlAhcXq5XnmNVgsUaNtFrVhY; SUPPORT_CONTENT=638641541866620088-116834210; _ga_H30R9PNQFN=GS1.1.1728557388.1.0.1728557388.0.0.0; _ga=GA1.3.1182680858.1728557389; _gid=GA1.3.1944910726.1728557390; _gat_gtag_UA_175894890_5=1
2024-10-10 10:49:59 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-10-10 10:49:59 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Thu, 10 Oct 2024 10:49:59 GMT Expires: Thu, 10 Oct 2024 10:49:59 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-10 10:49:59 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-10 10:49:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:49:21
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:49:23
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:49:25
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dsawuiohfd@gmail.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:49:36
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6408 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	06:49:36
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3192 --field-trial-handle=1704,i,14489115526872673088,17261556133345622456,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://dsawuiohfd@gmail.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Windows Analysis Report
http://dsawuiohfd@gmail.com